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In this paper the correspondence between safe Petri nets 
and event structures, due to Nielsen, Plotkin and Winskel, 
is extended to arbitrary nets without self-loops, under the 
collective token interpretation. To this end we propose a 
more general form of event structure, matching the expres- 
sive power of such nets. These new event structures and 
nets are connected by relating both notions with configura- 
tion structures, which can be regarded as representations of 
either event structures or nets that capture their behaviour 
in terms of action occurrences and the causal relationships 
between them, but abstract from any auxiliary structure. 

A configuration structure can also be considered logi- 
cally, as a class of propositional models, or — equivalently — 
as a propositional theory in disjunctive normal from. Con- 
verting this theory to conjunctive normal form is the key 
idea in the translation of such a structure into a net. 

For a variety of classes of event structures we charac- 
terise the associated classes of configuration structures in 
terms of their closure properties, as well as in terms of the 
axiomatisability of the associated propositional theories by 
formulae of simple prescribed forms, and in terms of struc- 
tural properties of the associated Petri nets. 



In Nielsen, Plotkin & Winskel [25] event struc- 
tures were introduced as a stepping stone between 
Petri nets and Scott domains. It was established that 
every safe Petri net can be unfolded into an occurrence 
net; the occurrence nets are then in correspondence 
with event structures; and they in turn are in cor- 
respondence with prime algebraic coherent Scott do- 
mains. In Winskel [Mj a more general notion of event 
structure was proposed, corresponding to a more gen- 
eral kind of Scott domain. The event structures from 
|25j are now called prime event structures with binary 
conflict. 

The translation from event structures to domains 
passes through a stage of families of configurations of 
event structures. Winskel [33] and Van Glabbeek & 
Goltz [11] found it convenient to use such families as 
a model of concurrency in its own right. In this context 
the families were called configuration structures [llj . 

Figure 2: Our main contribution: behaviour preserv- 
ing translations between four models of concurrency 



Introduction 

The aim of this paper is to connect several models of 
concurrency, by providing behaviour preserving trans- 
lations between them. 



Figure 1: Behaviour preserving translations in 
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The present paper \ /generalises the cor- 
respondence between^ ^ safe Petri nets and 

configuration structures to (possibly unsafe) nets with- 
out self- loops (the pure nets) . For this purpose we use 



a more general kind of configuration structure than 
in the set systems. These have an attractive al- 
ternative presentation as propositional theories [29] , 
which is exploited in their translation to nets. We also 
generalise the event structures of pH], so that, again, 
our configuration structures arise as their families of 
configurations. The connection between configuration 
structures and Scott domains is generalised in Van 
Glabbeek [5] , who proposes transition systems as al- 
ternative presentations of domains; we do not consider 
these matters further in the present paper. 

The relationship between configuration structures, 
infinitary propositional theories, event structures and 
Petri nets is described in Section [TJ We 1-unfold pure 
nets into pure 1- occurrence nets, which generalise the 
occurrence nets of [25 , and argue that this 1-unfolding 
preserves the causal and branching time behaviour of 
the represented system. This allows us to restrict at- 
tention to pure 1-occurrence nets in the rest of the pa- 
per. Moreover, we give translations showing that con- 
figuration structures, propositional theories and event 
structures are equivalent up to so-called configuration 
equivalence (which is defined as being mapped to the 
same configuration structures) and that, with a slight 
restriction, all four models are equivalent up to finitary 
equivalence. 

Section [2] introduces a computational interpretation 
of configuration structures, Petri nets and event struc- 
tures in terms of associated transition relations; re- 
stricted to pure Petri nets and pure event structures, 
these transition relations can be derived from the rel- 
evant sets of configurations, but not in general. With 
that, Section [3] provides definitions of notions of reach- 
able and secured (reachable in the limit) configurations 
and considers corresponding notions of equivalence by 
restricting to reachable or secured, and possibly finite, 
configurations. 

With the general framework thus provided, Sec- 
tion |4] considers the various brands of event structures 
introduced by Winskel and his co-workers. They are 
shown to correspond to natural restrictions on the gen- 
eral notion of event structure, adapting the compar- 
isons, on the one hand, to the original notion of con- 
figuration and, on the other hand, to the relevant one 
from the general theory. These comparisons are sum- 
marised in Table [TJ 

It is then natural to enquire how the event structure 
restrictions arc reflected in corresponding restrictions 
on configurations structures and so on; this is the sub- 
ject of Section [5j Sections 15.11 and 15.21 provide such 
comparisons, summarised in Table [21 for configuration 
structures and propositional theories up to configu- 
ration equivalence. The restrictions on configuration 



structures are natural closure properties, and those on 
propositional theories concern the form of the formu- 
lae occurring in an axiomatisation. Section 15.31 does 
the same, see Table [31 but now with the comparison 
based on the secured configurations. 

Section 15.41 concerns the finitary case, with gen- 
eral comparisons being summarised in Table [Hand the 
restriction to the finite reachable configurations sum- 
marised in Table El Section l5~5l ties in Petri nets, pro- 
viding corresponding structurally defined subclasses; 
however we were not successful in doing this in all 
cases. The main mathematical work is done in Sec- 
tions [5J] and [5721 with the rest of the section adapting 
this work to the various cases at hand. 

Section [6] contains a discussion of related work and 
presents some possibilities for future research. Finally, 
there is an index for the many technical terms intro- 
duced in the course of the paper. 

The papers [H] and [T3J contain extended abstracts 
of parts of this work, together with additional material. 

1 Four models of concurrency 

In this section we present the four models of con- 
currency mentioned in the introduction, and provide 
translations between them. 

1.1 Configuration structures 

Definition 1.1 A set system is a pair C = (E, C) with 
E a set and C C 'J'(E) a collection of subsets. 

When a set system is used to represent a concurrent 
system, we call it a pure configuration structure, but 
generally drop the word "pure" . (We envision intro- 
ducing a broader class of configuration structures in 
the future, matching the expressive power of impure 
nets.) The elements of E are then called events and the 
elements of C configurations. An event represents an 
occurrence of an action the system may perform; a con- 
figuration x represents a state of the system, namely 
the state in which the events in x have occurred. 

1.2 Propositional theories 

A set system can also be considered from a logical 
point of view: E is thought of as a collection of propo- 
sitions and C as the collection of models. Connect- 
ing with the computational point of view, we asso- 
ciate with an event the proposition that it has hap- 
pened. This point of view is due to Pratt [18l [29], 
We can now represent a set system by the valid sen- 
tences, those holding in all models; these are the laws 
ofC. 
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To make this precise, we choose a language: infini- 
tary prepositional logic. Given a set E of (proposi- 
tional) variables, the formulae over E form the least 
class including E and closed under -i (negation) and f\ 
(conjunction of sets of formulae). We make free use of 
other standard connectives such as =>, \j , _L, T: they 
are all definable from -i and f\. As usual, an interpre- 
tation of E is just a subset of E and one defines in the 
standard way when an interpretation makes a formula 
true. 

Definition 1.2 An (inftnitary) propositional theory is 
a pair T = (E, T) with E a set of propositional vari- 
ables and T a class of infinitary propositional formulae 
over E. 

A formula (p over E is valid in a set system C = (E,C) 
iff it is true in all elements of C; the theory associated 
to C is T(C) := (E,T(C)), where T(C) denotes the 
class of formulae valid in C. Equally, given a propo- 
sitional theory T = (E, T), its associated set system is 
M(T) := (E, M(T)), where M(T) is the set of models 
of T, those interpretations of E making every formula 
in T true. We say that T axiomatises M.(T). A for- 
mula ip over E is a logical consequence of a theory T 
if <p is true in any model of T; a formula "0 over 
implies ip iff the latter is a logical consequence of the 
theory (E, {tp})- Two propositional theories T and T' 
are logically equivalents yV((T) = M(T'), which is eas- 
ily seen to be the case iff they have the same logical 
consequences. 

Theorem 1 Let C = (E, C) be a set system. Then 
T(C) axiomatises C, i.e., M(T(C)) = C. 

Proof: The single formula Vxec(A AAA A E - x )) 
already constitutes an axiomatisation of C. ft is called 
the disjunctive normal form of T(C). □ 

Thus T and Ai provide a bijective correspondence be- 
tween set systems and infinitary propositional theories 
up to logical equivalence. For any two subsets X,Y of 
E, let the clause X Y abbreviate the implication 
/\ X \JY; we say that the elements of X are the 
antecedents of the clause, and those of Y its conse- 
quents. Then for any set system C = (E, C), the set of 
clauses {X =>• (E — X) \ X $ C} constitutes another 
axiomatisation of C. A theory consisting of a set of 
clauses is said to be in conjunctive normal form. 

1.3 Event structures 

Definition 1.3 An event structure is a pair E = 
(E, h) with 

• E a set of events, 



i hC 7(E) x 7(E), the enabling relation. 

Like a configuration structure, an event structure de- 
scribes a concurrent system in which the events repre- 
sent action occurrences. In previous notions of event 
structure [2H [35], one only had singleton enablings: 
h C 7(E) x E. Here we generalise h to a relation be- 
tween sets of events. As before, the enabling relation 
places some restrictions on which events can happen 
when. The idea here is that when X is the set of events 
that happened so far, an additional set U of events can 
happen (concurrently) iff every subset of X U U is en- 
abled by a set of events that happened before, i.e., a 
subset of X. 

Example 1 Let E = {d, e, /} and the enabling rela- 
tion be given by h X for any X C E with X =/= E. In 
the initial state of the event structure E = (E, h), each 
of the events d, e and / can happen, and any two of 
them can happen concurrently. However, there is no 
way all three events can ever happen, because there is 
no set of events X with X h {d, e, /}. This is a case 
of ternary conflict. 

Example 2 Let E = {a, b, c} and the enabling rela- 
tion be given by {c} h {a, b} and h X for any X C E 
with X ^ {a, b}. Initially, each of the events a, b and 
c can occur, and the events a and c can even happen 
concurrently. The events a and b, on the other hand, 
can initially not happen concurrently, for we do not 
have I- {a, b}. However, as soon as c occurs, the 
events a and b can occur in parallel. We say that the 
conflict between a and b is resolved by the occurrence 
of c. 

Example 3 Let E = {d, e} and the enabling relation 
be given by {d} h {d, e} and h X for any X C E 
with X ^ {d, e}. Initially, d and e can both occur, but 
not in parallel. After d has happened, e may follow, 
but when e happens first, d cannot follow. The reason 
is that we do not have X h {d, e, } for some X C {e}. 
This is a case of asymmetric conflict [221 126) . 

In Section U we will explain how these event structures 
generalise the ones of [25l [3H [35]. In those papers 
the behaviour of an event structure is formalised by 
associating to it a family of configurations. However, 
there are several ways to do so (cf. Section [3]); here we 
only consider the simplest variant. 

Definition 1.4 Let E = (E, h) be an event structure. 
The set L(E) of left- closed configurations of E is given 

by 

x e l(e) & vr c x. 3Z c x. z h y. 
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The left-closed configuration structure associated to E 
is £(E) := (E, L(E)). Two event structures E and F 
are C-equivalent if £(E) = £(F). 

In Section[2]we provide a computational interpretation 
of event structures with the property that the left- 
closed configurations of an event structure adequately 
represent the behaviour of the represented system for 
the following class of "pure" event structures: 

Definition 1.5 An event structure is pure if X h Y 
only if X n Y = 0. 

The event structures of Examples Q] and [2] are pure, 
but the one of Example [3] is not. 

We now show that any configuration structure can 
be obtained as the left-closed configuration structure 
associated to a pure event structure. 

Definition 1.6 Let C = (E,C) be a configuration 
structure. The event structure associated to C is 

£(C) :=(£,h),withxhriffxnr=0 a xuyec. 

Theorem 2 Let C be a configuration structure. Then 
£(C) is pure and £(£(C)) = C. 

Proof: Let C = (E,C) and £(C) = (E,\~). Suppose 
x e C. For any Y C x take Z := x — Y. Then Z C x 
and Z h Y. So x G £(£(C)). Conversely, suppose 
x G £(£(C)). Then there is a Z C x such that Zhi. 
(In fact, Z = 0.) By construction, x — Z \J x ^ C . □ 

Hence, £ and £ provide a bijective correspondence be- 
tween configuration structures and (pure) event struc- 
tures up to £-equivalence. 

Event structures vs. propositional theories 

By combining Theorems [T] and [5] we find that T o £ 
and £ o M. constitute a bijective correspondence be- 
tween (pure) event structures up to £-equivalence and 
propositional theories up to logical equivalence. Below 
we provide direct translations between them. 

To any event structure E = (E, h) we associate the 
propositional theory T(E) := (E,T(E)), where 



T(E):= {a*^ V A Y 



X C E 



This logical view of event structures corresponds ex- 
actly with their left-closed interpretation: 



Proposition 1.1 M(T(E)) 
structure E. 



£(E) for any event 



Proof: Immediate from the definitions. 



□ 



Similarly, to any propositional theory T = (E, T) in 
conjunctive normal form we associate the (not neces- 
sarily pure) event structure £(T) := (E, hx), where 

x h T Y ^yz. ((Y ^ z) eT ^ x nz ^9). 

Proposition 1.2 £(£(T)) = M(T) for any theory T 
in conjunctive normal form. 

Proof: Let x € M(T). To establish x G £(£(T)) we 
take Y C x and show x hx Y. Let Z C E be such 
that (Y => Z) 6 T. As Y => Z is true in x we have 
Z n x ^ 0. It follows that x G £(£(T)). 

Now let x e £(£(T)). To establish x G X(T) we 
take (Y" => Z) G T. We have to show that Y Z is 
true in x. So suppose Y C x. Then there must be a 
W C x with W H T Y, hence IY n Z ^ 0. It follows 
that iflZ^H, which had to be shown. □ 

Thus T and £ provide a bijective correspondence be- 
tween event structures up to £-equivalence and propo- 
sitional theories up to logical equivalence. 

Definition 1.7 A propositional theory in conjunctive 
normal form is pure if it only contains clauses X Y 
with X n Y = 0. 

Clearly every propositional theory is logically equiv- 
alent to a pure one, as impure clauses are tautolo- 
gies, i.e., they hold in all interpretations. In case 
T = (E, T) is a pure theory, we can define the as- 
sociated pure event structure £ P (T) := (E,\- p ) by 
Ah p Y^XnY = 0AAh T Y. Note that £ P (T) is 
pure and £(£ P (T)) = M(T). 

1.4 Petri nets 
Definition 1.8 

A Petri net is a tuple N = (S, T, F, I) with 

• S and T two disjoint sets of places and transitions 
(Stellen and Transitionen in German), 

• F:(5xTUTxS)-*]N, the flow relation, 

• and / : S — ► IN, the initial marking. 

Petri nets are pictured by drawing the places as circles 
and the transitions as boxes. For x, y G SUT there are 
F(x,y) arcs from x to y. A net is said to be without 
ar cw eights arcw eights if the range of F is {0, 1}. 

When a Petri net represents a concurrent system, 
a global state of such a system is given as a marking, 
which is a multiset over S, i.e., a function M G IN 5 . 
Such a state is depicted by placing M{s) dots {tokens) 
in each place s. The initial state is given by the mark- 
ing /. In order to describe the behaviour of a net, we 
describe the step transition relation between markings. 



4 



Definition 1.9 For two multisets M and N over S, or 
more generally for functions M, N G Z , write M < N 
if M(s) < 2V(s) for all sgS"; M+N G Z 5 is the function 
given by (M + iV)(s) := M(s)+JV(a), and G N 5 the 
one with 0(s) := for all s G S; M - N G Z 5 is given 
by (M - iV)(s) := M(s) - N(s). 

A multiset M over S is /imie if {s G 5 | M (s) > 0} 
is finite. A multiset M G 1N S with M(s) < 1 for all 
s G 5 is identified with the set {s G S \ M(s) = 1}. 

Note that for multisets M and N, the function M — N 
need not be a multiset. 

Definition 1.10 For a finite multiset U : T -> IN of 
transitions in a Petri net, let *U, U m : S IN be the 
multisets of pre- and postplaces of £/, given by 

•f/(s) := F ( s > *M*) and U '( s ) ■= u ( t ) F (^ s ) 

for s G S. We say that C/ is enabled under a marking M 
if *E7 < M. In that case U can fire under M, yielding 
the marking M' := M — 'U + U', written M M' . 

A chain / M\ — ^> ■ ■ ■ — ^ M n is called a firing 
sequence. A marking M is reachable if there is such a 
sequence ending in M = M n . 

If a multiset U of transitions fires, for every transi- 
tion t in U and every arc from a place s to t, a token 
moves along that arc from s to t. These tokens are 
consumed by the firing, but also new tokens are cre- 
ated, namely one for every outgoing arc of t. These 
end up in the places at the end of those arcs. If t oc- 
curs several times in U , all this happens several times 
(in parallel) as well. The firing of U is only possible 
if there are sufficiently many tokens in the preplaces 
of U (the places where the incoming arcs come from). 
In Section [2. 61 we explain why we consider the firing of 
finite multisets only. 

From Petri nets to configuration structures 

As for event structures, the behaviour of a net can be 
captured by associating to it a family of configurations. 

Definition 1.11 A (finite) configuration of a Petri 
net N = (S, T, F, I) is any finite multiset X of transi- 
tions with the property that the function Mx ■ S — > Z 
given by Mx '■= I—'X+X' is a marking, i.e., Mx > 0. 
Let C(N) denote the set of configurations of N. 

Note that is a configuration and Mo = /; note 
further that if a; is a configuration and M x — ► M' 
then x + U is a configuration and M' — M x+ jj. So 
if I — 1 -+ Mi ■ ■ ■ — ^ M n is a firing sequence, then 



x := U\ -\ \-U n is a configuration and M n = M x . In 

general, when x G C(N) then M x is the marking that 
would result from firing all transitions in x, if possible, 
regardless of the order in which they fire. 

Next we will determine which nets can be faithfully 
described in this way by means of set systems. 

Definition 1.12 A 1-occurrence net is a net in which 
every configuration is a set. 

This implies that any transition can fire at most once, 
i.e., in every firing sequence Mq — U • • • M n the 
multisets Ui, U n are sets and disjoint. When deal- 
ing with a 1-occurrence net, typically presented as a 
tuple (S, E, F, I), we call its transitions events. 

Definition 1.13 A net N = (S, T, F, I) is pure if there 
is no s in S and t in T with F(s, t) > and F(t, s) > 0, 
i.e., if it is without self-loops. 

In Section [5] we will argue that the configurations of a 
1-occurrence net adequately represent the behaviour 
of the represented system only in the case of pure 
nets. Therefore we will restrict attention to pure 1- 
occurrence nets. 

Definition 1.14 Let N = (S,E,F,I) be a pure 1- 
occurrence net. Its associated configuration structure 
C(N) is (E, C(N)). Two such nets N and N' are configu- 
ration equivalent — written N = c N'— if C(N) = C(N'). 

Individual vs. collective tokens 

There are two different schools of thought in interpret- 
ing the causal behaviour of Petri nets, which can be 
described as the individual and collective token philos- 
ophy [nn]0 The following example illustrates their 
difference. 




In this net, the transitions a and b can fire once each. 
After a has fired, there are two tokens in the mid- 
dle place. According to the individual token philos- 
ophy, it makes a difference which of these tokens is 
used in firing b. If the token that was there already 
is used (which must certainly be the case if b fires be- 
fore the token from a arrives), the transitions a and b 
are causally independent. If the token that was pro- 
duced by a is used, b is causally dependent on a. Thus, 

1 The individual token interpretation of ordinary nets should 
not be confused with the concept of Petri nets with individual 
tokens 30 such as predicate/transition nets or coloured Petri 
nets; there the individuality is hardwired into the syntax of nets. 
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the net A above has two maximal computations, that 
can be characterised by partial orders: a — >-b and the 
trivial one , . According to the collective token phi- 
losophy on the other hand, all that is present in the 
middle place after the occurrence of a is the number 
2. The preconditions for b to fire do not change, and 
consequently b is always causally independent of a. 

A net is called safe if no reachable marking has mul- 
tiple tokens in the same place. For safe nets there is no 
difference between the individual and collective token 
interpretations. 

The individual token approach has been formalised 
by the notion of a process, described in Goltz & 
Reisig [14] . A causality-respecting bisimulation re- 
lation based on this approach was proposed by Best, 
Devillers, Kiehn & Pomello [3] under the name 
fully concurrent bisimulation. Also the unfolding of 
non-safe nets into (safe) occurrence nets proposed 
by Engelfriet [6] and Meseguer, Montanari & 
Sassone [24] embraces the individual token philoso- 
phy- 

Best & Devillers [2] adapted the process concept 
of [14] to fit the collective token philosophy. Equiva- 
lence relations on Petri nets based on the collective to- 
ken interpretation were proposed by us in [12] , and in- 
clude configuration equivalence, defined above. There 
is no unfolding construction that converts arbitrary 
non-safe nets into safe nets while preserving their col- 
lective token interpretation, for under the collective 
token interpretation non-safe nets arc strictly more ex- 
pressive than safe ones [3] : only the former can express 
resolvable conflict |13| . 

The following example shows that the collective to- 
ken philosophy allows the identification of nets that are 
distinguished under the individual token philosophy. 



C: 



B: 



Under the collective token interpretation the precon- 
dition of b expressed by the place in the middle of net 
A is redundant, and hence A must be equivalent to B. 
In fact, A=c B. However, A and B are not fully con- 
current bisimulation equivalent, as B lacks the compu- 
tation a — «- 6. 

Conversely, the individual token philosophy allows 
identifications that are invalid under the collective to- 
ken philosophy, but these necessarily involve labelled 
nets. A labelled net is a tuple (S, T, F, I, I) with 
{S, T, F, I) a net and I : T — > Act a labelling func- 
tion over some set of action names Act. The labelling 
enables the presence of multiple transitions with the 
same name. The net A is fully concurrent bisimulation 
equivalent with the labelled net C below. 




In fact, C is the occurrence net obtained from A by the 
unfolding of 6, 24J . In the individual token philosophy, 
both A and C have the computations a — «-& and t°. 
However, in the collective token philosophy A does not 
have a run a — «-& and can therefore not be equivalent 
to C in any causality preserving way. 

Thus, capturing the behaviour of nets by means of 
our mapping C to configuration structures is compat- 
ible with the collective token interpretation only. In 
the remainder of this paper, we therefore take the col- 
lective token approach. 

Rooted structures and finitary equivalence 

The configuration structure associated to a pure 1- 
occurrence net is always finitary, meaning that all con- 
figurations are finite, and rooted, meaning that the 
empty set of events is a configuration. In order to 
translate between the models of concurrency seen be- 
fore and Petri nets, we therefore restrict attention to 
rooted structures, and ignore infinite configurations. 

Definition 1.15 A configuration structure C = (E, C) 
is rooted if £ C. A propositional theory is rooted 
if it has no clause of the form =>■ X as a logical 
consequence. An event structure E = (E, h) is rooted 
if h 0. 

Proposition 1.3 If C is rooted, then so are T(C) and 
£(C). If T is rooted, then so are M(T) and £(T). If 
E is rooted, then so are £(E) and T(E). 



Proof: Straightforward. 



□ 



Definition 1.16 Given a configuration structure C, 
let T(C) be the configuration structure with the same 
events but with only the finite configurations of C. 
Two configuration structures C and D are finitarily 
equivalent — written C ~/ D — if ^(C) = ^(D). 

Instead of considering configuration structures up to 
finitary equivalence, we could just as well restrict at- 
tention to finitary configuration structures, thereby 
taking a normal form in each equivalence class. How- 
ever, on the level of propositional theories this involves 
adding clauses X => for every infinite set of events 
X, which would needlessly complicate the forthcoming 
Proposition 11.41 Moreover, the fact that C(N) is fini- 
tary for every pure 1-occurrence net N is more a con- 
sequence of not considering infinite configurations of 
Petri nets than of there not being any (cf. Section [2~6]) . 
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Prom configuration structures to Petri nets 

We now proceed to show that, up to fmitary equiva- 
lence, every rooted configuration structure can be ob- 
tained as the image of a pure 1-occurrence net. 

Definition 1.17 Let T = (E,T) be a rooted preposi- 
tional theory in conjunctive normal form. We define 
the associated Petri net A/"(T) as follows. As transi- 
tions of the net we take the events from E. For every 
transition we add one place, containing one initial to- 
ken, that has no incoming arcs, and with its only out- 
going arc going to that transition. These 1-occurrence 
places make sure that every transition fires at most 
once. For every clause X Y in T with X finite, 
we introduce a place in the net. This place has outgo- 
ing arcs to each of the transitions in X, and incoming 
arcs from each of the transitions in Y. Let n be the 
cardinality of X. As T is rooted, n / 0. We finish 
the construction by putting n — 1 initial tokens in the 
created place: 



X < 



The place belonging to the clause X =>• Y does not 
place any restrictions on the firing of the first n — 1 
transitions in X. However, the last one can only fire 
after an extra token arrives in the place. This can hap- 
pen only if one of the transitions in Y fires first. The 
firing of more transitions in Y has no adverse effects, 
as each of the transitions in X can fire only once. Thus 
this place imposes the same restriction on the occur- 
rence of events as does the corresponding clause. 

Theorem 3 Let T be a rooted propositional theory 
in conjunctive normal form. Then 

C(A/-(T)) ~ f M(T). 

Proof: z e C(Af(T)) iff z is finite and M z (s) > for 
any place s. We have M z {s) > for all 1-occurrence 
places s exactly when no transition fires twice in z, 
i.e., when z is a set. For a place s belonging to the 
clause X ^> Y we have M z (s) > iff either one of the 
transitions in Y has fired, or not all of the transitions 
in X have fired, i.e., when X =>■ Y holds in z, seen as a 
model of propositional logic. The clauses X =>• Y of T 
with X infinite surely hold in any finite configuration 
z. Thus, z G C(JV(T)) iff z is a finite model of T. □ 




The net Af(T) is always without arcweights. Moreover, 
in case T is pure (cf. Definition 11.70 . so is the net 
A/"(T). As any rooted configuration structure can be 
axiomatised by a pure rooted propositional theory in 
conjunctive normal form, it follows that 

Corollary 1 For every rooted configuration structure 
there exists a pure 1-occurrence net without arcweights 
with the same finite configurations. □ 

Thus we have established a bijective correspondence 
between rooted configuration structures up to fmitary 
equivalence and pure 1-occurrence nets up to configu- 
ration equivalence. Moreover, every pure 1-occurrence 
net is configuration equivalent to a pure 1-occurrence 
net without arcweights. 

Example 4 The event structure with ternary conflict 
of Example [1] can be represented by the propositional 
theory 

The Petri net associated to 
this theory by Definition II. 171 is: 




Example 5 Below are the event structure with re- 
solvable conflict from Example [2J its representation as 
a propositional theory, and the associated Petri net, 
as well as its configurations, ordered by inclusion. 

E = {a, b, c} fv) {«> 6 > c i 

{c} h {a, b} 

h X for X y£ {a, b} 




{a,c} {b,c} 
{a}^{c/{b} 



(a A 6) 



Example 6 Below is a propositional theory describ- 
ing a system in which either a or b is sufficient to enable 
the event c; this is sometimes called disjunctive causal- 
ity. We also display the associated Petri net, and its 
representation as an event structure and a configura- 
tion structure. 



(aVb) 



{a,b, c} 



{a} h {c} 
{b} h {c} 
hi 



for X ^ {c} 
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In case we modify the event structure by omitting the 
enabling h {a, b}, the propositional theory gains a 
clause (a A b) =>■ _L, the Petri net gains a marked place 
with arrows to a and 6, and the configuration structure 
loses the configurations {a, 6} and {a, b, c}. 

From nets to theories and event structures 

We know already how to translate pure 1-occurrence 
nets into propositional theories and event structures, 
namely through the intermediate stage of configura- 
tion structures. Below we provide direct translations 
that might shed more light on the relationships be- 
tween these models of concurrency. 

Let N = (S, E, F, I) be a 1-occurrence net. For any 
place s e S let s* := {t e E \ F(s, t) > 0} be its set of 
posttransitions and *s := {t G E F(t, e) > 0} its set of 
pretransitions. For any finite set Y C s* of posttran- 
sitions of s, *Y(s) is the number of tokens needed in 
place s for all transitions in Y to fired so *Y(s) — H s )> 
if positive, is the number of tokens that have to arrive 
in s before all transitions in Y can fire. Furthermore, 
for neZ, let n s := {X C m s X'(s) > n} be the collec- 
tion of sets X of pretransitions of s, such that if all 
transitions in X fire, at least n tokens will arrive in s. 
Write Y s for y ( s ) -7 ( s )s. One of the sets of transitions 
in Y s has to fire entirely before all transitions in Y can 
fire. 

The formula := Vxe™sA^ expresses which 
transitions need to^fire for n tokens to arrive in s. The 
formula /\Y => ip S Y ^ T ^ expresses that one of the 
sets of transitions in s has to fire entirely before all 
transitions in Y can fire. The propositional theory as- 
sociated to N is defined as T(N) := (E, T(N)), where 
T(N) consists of all formulae A Y => ip' s Y{s) ~ I{s) with 
s G S and Y Cfi n s*. It follows that 

Proposition 1.4 _A/f(T(N)) ~_f C(N) for any pure 1- 
occurrence net N. □ 

Proof: Let N = (S, E, F, 7) be a pure 1-occurrence 
net and X Cfi n E be a finite set of transitions of N. 
Then X G M(T(N)) iff for all s G S and Y C fin s' 
the formula /\ Y (p s 5 ' is true in X, which is 

the case iff (Y C X) =>3Z C X. Z G* y(;s) " /(s) s, or 

(Y C X) => C X Z C *s A Z*(s) > 'Y(s) - 7(s). 

In the latter formula the clause Z C *s can just as well 
be deleted, as transitions in Z that are not in *s do 
not make a contribution to Z*(s) anyway. Thus this 
formula is equivalent to 

(Y C X) =► X(s) > *Y(s) - 7(s). 

2 In case N is without arcweights, *Y(s) is simply |V| (cf. I.'i ). 



Likewise, requiring this implication to merely hold for 
sets of transitions Y with Y C^ n s' is moot. Hence 

X G M(T(N)) Vs G 5. Jt*(«) > *X(s) - 7(s) 

& Vs G 5. 7(a) - *X(s) + X*(s) > 

M x > 

«IeC(N). n 

For any finite set of transitions Y C E, let SV be the 
set of places s with Y C s* and * Y(s) — I(s) > 0. Now 
write X Hn Y whenever X = lj ses X with X, G i s. 
We also write I~n Y whenever Y is infinite. The event 
structure associated to N is defined as £(N) := (E, 
Note that if N is pure, then so is £(N). 

Proposition 1.5 Let N be a pure 1-occurrence net. 
Then £(£(N)) ~/ C(N). □ 

Proof: Let N = (5, E, F, I) be a pure 1-occurrence 
net and X Cfi n E be a finite set of transitions of N. 
Then 

X g £(£(N)) VY C X. 3Z C X. Z h N Y 
«VFCX Vs G Sr. 3Z S C X. Z s G Y s ^ 
VY C X. Vs G Sy . 3Z S QX.Z S C 'sAZ' s (s) > *Y(s)-I(s) 
0VFCXVse5y. X*(s) > * Y(s) - 7(s) 
OVFCX VsgS. (YCs* =^X*(s) > *Y(s) -7(a)) 
VseS. VYCX. X'(s) > •Y(s)-I(s) 
& VsgS. X\s) > 'X(s) - I(s) 

M x > ^ X G C(N). □ 

The size of T(N) and £(N) can be reduced by re- 
defining ™s to consist of the minimal subsets X of *s 
with X'(s) > n. This does not affect the truth of 
Propositions 11.41 and 11.51 although it slightly compli- 
cates their proofs. Likewise, in the definition of T(N) 
only those formulae f\ Y => f s Y ^ I ^ are needed for 
which 'Y(s) — 7(s) > (the remaining formulae being 
tautologies). This yields the maps of [13]. 

1-Unfolding 

Below we show that the restriction to 1-occurrence 
nets is not very crucial; every net can be "unfolded" 
into a 1-occurrence net without changing its behaviour 
in any essential way. However, the unfolding cannot be 
configuration equivalent to the original, as the identity 
of transitions cannot be preserved. 

Definition 1.18 Let N = (S,T,F,I) be a Petri net. 
Its 1-unfolding N' := (S 1 , T', F', I') into a 1-occurrence 
net is given by (for s G S,t G T, u, u' G T") 
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• T := T x N, 

• S' :=SU(T' x {*}), 

• F'(s, (t, n)) := F(s, t) and F'((t, n), s) := F(t, s), 

• F'(u, («,*)) = F'((u,*)X) = := 
and F'((u, *), u) := 1 for u, u' G T' with u ^ u', 

• I'(s) := I(s) and /'((«, *)) : = 1. 

Thus, every transition is replaced by countably many 
copies, each of which is connected with its environ- 
ment (though the flow relation) in exactly the same 
way as the original. Furthermore, for every such copy 
u an extra place (u, *) is created, containing one ini- 
tial token, and having no incoming arcs and only one 
outgoing arc, going to u. This place guarantees that u 
can fire only once. 




A net fragment and its 1-unfolding 

We argue that the causal and branching time be- 
haviour of the represented system is preserved under 
1-unfolding. When dealing with labelled Petri nets, 
all copies (t, n) of a transition t carry the same label 
as t. In this setting, common semantic equivalences 
like the fully concurrent bisimulation equivalence [3J or 
the (hereditary) history preserving bisimulation equiv- 
alence [10] under either the individual or collective to- 
ken interpretation identify a net and its 1-unfolding. 

Note that the construction above does not intro- 
duce self-loops. Thus unfoldings of pure nets remain 
pure. We therefore have translations between arbi- 
trary pure nets, event structures, configuration struc- 
tures and propositional theories, as indicated in the 
introduction. 

It is possible to give a slightly different interpre- 
tation of nets, namely by excluding transitions from 
firing concurrently with themselves (cf. [T2])H This 
amounts to simplifying Definition 11.101 by requiring U 
to be a set rather than a multiset. Under this inter- 
pretation our unfolding could introduce concurrency 

3 This distinction is independent of the individual-collective 
token dichotomy, thus yielding four computational interpreta- 
tions of nets [9]. 



that was not present before. However, for this pur- 
pose Definition 11.181 can be adapted by removing the 
initial tokens from the places ((i, n), *) for t G T and 
n > (but leaving the token in ((t, 0), *)), and adding 
an arc from transition (t, n) to place ((i, n + 1), *) for 
every <eT and n G N. 

2 Computational interpretation 

In this section we formalise the dynamic behaviour of 
configuration structures, Petri nets and event struc- 
tures, by defining a transition relation between their 
configurations. This transition relation tells how a rep- 
resented system can evolve from one state to another. 
We prove that on the classes of pure 1-occurrence nets 
and pure event structures the translations of Section [T] 
preserve these transition relations, and show that this 
result does not extend to impure 1-occurrence nets or 
impure event structures. 

We indicate that impure nets and event structures 
may be captured by considering configuration struc- 
tures upgraded with an explicit transition relation be- 
tween their configurations. However, the methodology 
of the present paper is incapable of providing tran- 
sition preserving translations between general event 
structures, 1-occurrence nets and the upgraded config- 
uration structures. It is for this reason that we focus 
on pure nets and pure event structures. 

Our transition relation for Petri nets is derived di- 
rectly from the firing rule, which constitutes the stan- 
dard computational interpretation of nets. The idea 
of explicitly defining a transition relation between the 
configurations of an event structure may be new, but 
we believe that our transition relation is the only nat- 
ural candidate that is consistent with the notion of 
configuration employed in Winskel [3~ll |3"5] (cf. Sec- 
tions [3] and [3]) . Our transition relation on configuration 
structures is chosen so as to match the ones on nets 
and on event structures, and formalises a computa- 
tional interpretation of configuration structures which 
we call the asynchronous interpretation. 

We briefly discuss two alternative interpretations 
of configuration structures, formalised by alternative 
transition relations. The first is the computational 
interpretation of Chu spaces from Gupta & Pratt 
[TBI \T7\ [29] . The second is a variant of our asyn- 
chronous interpretation, based on the assumption that 
only finitely many events can happen in a finite time. 
This finitary asynchronous interpretation matches the 
standard computational interpretation of Petri nets 
better than does the asynchronous interpretation, al- 
though it falls short in explaining uncountable configu- 
rations of event structures (34] [35] . We point out some 
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problems that stand in the way of lifting the compu- 
tational interpretation of nets to the infinitary level. 

2.1 The asynchronous interpretation 

Definition 2.1 Let C = (E,C) be a configuration 
structure. For x, y in C write x — >c V if % Q V and 

vz(x aci,=>2eC). 

The relation — >c is called the step transition relation. 

Here x — >c V indicates that the represented system 
can go from state x to state y by concurrently per- 
forming a number of events (namely those in y — x). 
The first requirement is unavoidable. The second one 
says that a number of events can be performed con- 
currently, or simultaneously, only if they can be per- 
formed in any order. This requirement represents our 
postulate that different events do not synchronise in 
any way; they can happen in one step only if they 
are causally independent. Hence our transition rela- 
tion — >c and the corresponding computational inter- 
pretation of configuration structures is termed asyn- 
chronous. 



The single-action transition relation 



on CxC 



is given by x — > c y iff x C y and y — x is a singleton. 
In pictures we omit transitions of the form x — >c %, 
that exists for every configuration x, we indicate the 
single-action transition relation by solid arrows, and 
the rest of the step transition relation by dashed ones. 

Example 7 These are the transition relations for D = 
({d, e}, {0, {d}, {e}, {d, e}}) and two structures E and 
F. 

{d,e,f} {d,e,f} {d,ej>} 
'*\ {dj} {e,/} {d, /} {e,f>} 



{d} 



t 

{d} 



t 

{e} 



t 

{d} 



t 



D 



E 



Such pictures of configuration structures are somewhat 
misleading representations, as they suggest a notion of 
global time, under which at any time the represented 
system is in one of its states, moving from one state 
to another by following the transitions. Although this 
certainly constitutes a valid interpretation, we favour 
a more truly concurrent view, in which all events can 
be performed independently, unless the absence of cer- 
tain configurations indicates otherwise. Under this in- 
terpretation, the configurations can be thought of as 
possible states the system can be in, from the point 
of view of a possible observer. They are introduced 



only to indicate (by their absence) the dependencies 
between events in the represented system. 

In particular, in the structure D above, the events 
d and e are completely independent, and there is no 
need to assume that they are performed either simul- 
taneously or in a particular order. The "diagonal" in 
the picture serves merely to remind us of the indepen- 
dence of these events. In terms of higher dimensional 
automata [28] it indicates that "the square is filled in" . 

On the other hand, the absence of any "diagonals" 
in E indicates two distinct linearly ordered computa- 
tions. In one the event / can only happen after event 
d, and e in turn has to wait for /; the other has a 
causal ordering e < / < d. There is no way to view 
d and e as independent; if there were, there should 
be a transition — >c {d,e}. In labelled versions of 
configuration structures, a computationally motivated 
semantic equivalence would identify the structures E 
and F, provided the events / and /' carry the same 
label. We do not address such semantic equivalences 
in this paper, however. 

The configuration structure E is completely axioma- 
tised by the two clauses 

/ => d V e 
d A e => f 

indicating the absence of configurations {/} and {d, e}, 
respectively. On the other hand, D has the empty 
axiomatisation. An event structure representing D is 
given by the enabling relation 0h0, 0h{d}, 0h{e} 
and h {d, e}, whereas an enabling relation for E 
is h 0, h {d}, h {e}, {d} h {/}, {e} h {/}, 
h {d,f}, h {e,/}, {/} h {d,e} and h {d,e,f}. 
Petri net representations of D and E are given below. 




D 



E 




Example 8 Take the system G, represented below as 
a configuration structure with a transition relation, a 
propositional theory, an event structure and a Petri 
net. There is no need to assume, as following the tran- 
sitions might suggest, that in any execution of G the 
event d happens either after e or before /; when actions 
may have a duration, d may overlap with both e and /. 
The configuration structure, with its step transition re- 
lation, is not meant to order d with respect to e and /. 
All it does is specify that / comes after e, and it does so 
by not including configurations {/} and {d,f}. This 
is concisely conveyed by the representation of G as a 
propositional theory in conjunctive normal form. 
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G 



{d 



{d,e,f} 
/ * \ 



{d,e} 



{eJ} 



E = {d,e,f} 

{4 h {/} 

h X for X ^ {/} 



2.2 Petri nets 



The firing relation between markings induces a transi- 
tion relation between the configurations of a net: 

Definition 2.2 The step transition relation — >n be- 
tween the configurations x, y of a net N is given by 



> N 2/ ^ (x < y A M x 



We now show that on pure 1-occurrence nets this step 
transition relation matches the one on configuration 
structures defined above. 

Proposition 2.1 In a pure net N we have 

x — > N y iff x < y A VZ(x < Z <y => Z £ C*(N)) 

for all x, y in C(N). (In case N is a pure 1-occurrence 
net, the right-hand side can be written as x — >e(N) U-) 

Proof: "Only if": Let x — > N y for x,y £ C(N). 
Then M x = / — *x + x* > and y — x is enabled under 
M x , i.e., *(y - x) < M x . Now let x < Z < y. Then 
'(Z-x) < '(y-x) < M x , so 

M z = I -'Z + Z m = I - m x + x* - '(Z-x) + (Z-x)' 

= M x - '{Z-x) + {Z-x)' > + {Z-x)' > 0, 
i.e., Z is a configuration of N. Note that for this di- 
rection pureness is not needed. 

"If": Suppose x,y£C(N) and x<y, but x -/->n 2A 
Then y — x is not enabled under M^, i.e., there is a 
place seS, such that *{y — x){s) > M x {s). Let U be 
the multiset of those transitions t in y — x for which 
F{s,t) > 0. Then 'U(s) = '{y-x)(s) > M x {s). As 
N is pure, for all transitions t GU we have F(t, s) = 0, 
i.e., U'{s) = 0. Hence 

M {x+U) {s) = M x {s) - 'U(s) + U'{s) < 0, 

i.e., x + U £ C(N). Yet x < (x + C/) < y. □ 

It follows that the step transition relation on a pure 
net N is completely determined by the set of configu- 



rations of N, and that for pure 1-occurrence nets this 
transition relation exactly matches the one of Defi- 
nition 12.11 This makes C(N) an acceptable abstract 
representation of a pure 1-occurrence net N. 

On an impure net N the step transition relation 
is in general not determined by the set of configura- 
tions of N. The 1-occurrence nets P and M below 
have very different behaviour: in P the transitions d 
and e can be done in parallel (there is a transition 
— >p {d 7 e}), whereas in M there is mutual exclu- 
sion. Yet their configurations are the same: C(P) = 

M: 



C(M) = {0, {d}, {e}, {d, e}}. Therefore it is not a good 
idea to represent each 1-occurrence net N = (S, E, F, I) 
by the configuration structure (E, C(N)). 

2.3 Event structures 

Definition 2.3 The step transition relation — >e be- 
tween configurations x, y £ L(E) of an event structure 
E = (E, h) is given by 

X > E y ^ (x C y A VZ C y. 3W C x. W h Z). 



This formalises the intuition provided in Section 11.31 
The following proposition says that for pure event 
structures this transition relation also exactly matches 
the one of Definition 12.11 



Proposition 2.2 Let E be a pure event structure, 
and x, y £ L(E). Then x — >e y iff x — >£(e) V- 

Proof: We have to establish that 

x — > E y iff x C y A \/Z(x C Z C y Z £ L{E)). 

"Only if" follows immediately from the definitions. 
For "if" let x C y and VZ(x C Z C y ^ Z £ L(E)). 
Let Z C y. Then xCxUZCy, so x U Z £ L(E). 
Hence, by Definition O C x U Z. W h Z. As E 
is pure, W C\ Z — hence C x, as required. □ 

This makes £(E) an acceptable abstract representation 
of a pure event structure E. 

As for Petri nets, Proposition ^ . 2l does not generalise 
to impure event structures, with again the systems P 
and M serving as a counterexample. An event struc- 
ture representation for M is (E, h), with E — {d,e} 
and h given by h 0, h {d}, h {e}, {d} h {d, e} 
and {e} h {o?, e}. Another counterexample is the event 
structure, say H, of Example [3] The transition rela- 
tions of P, M and H are 
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We} 



{d] 



M: 



3} {d 



We} 



H 



Re} 
{df {e} 



2.4 The impure case 

In order to provide an adequate abstract represen- 
tation of impure 1-occurrences nets or impure event 
structures one could use triples (E, C, — ») with (E, C) 
a configuration structure and C CxCan explicitly 
defined transition relation between its configurations. 
To capture arbitrary Petri nets one could further al- 
low the configurations to be multisets of events, rather 
than sets. 

Definition 2.4 A multiset transition system is a tri- 
ple (E, C, ->) with E a set, C C ]N B a collection of 
multisets over E and -^CCxC. 

For a configuration structure C = (E, C), an event 
structure E = (E, h) and a Petri net N = (S, T, F, I), 
the associated multiset transition system is given by 
C+(C) :=<£,C,— > c >, C+(E) :=(E,L(E),— > E ) and 
C+(N) := (T,C(N), — ►*,), respectively. 

Two structures K and L that may be configuration 
structures, event structures and/or Petri nets are tran- 
sition equivalent if C + (K) = C + (L). 

By Propositions 12.11 and 12. 2[ for pure 1-occurrence 
nets transition equivalence coincides with configura- 
tion equivalence, and for pure event structures it coin- 
cides with /^-equivalence. 

We conjecture that there exist maps between 1- 
occurrence nets and event structures that preserve 
transition equivalence. However, the set-up of the 
present paper, that uses propositional theories up to 
logical equivalence as a stepping stone in the transla- 
tion from event structures to Petri nets, is insufficient 
to establish this beyond the pure case. It is for this 
reason that we focus on pure nets and pure event struc- 
tures. 

2.5 The Gupta-Pratt interpretation 

Our configuration structures are, up to isomorphism, 
the extensional Chu spaces of Gupta & Pratt 
[18] fTTj. [29] . It was in their work that the idea arose of 
using the full generality of such structures in modelling 
concurrency. It should be noted however that the com- 
putational interpretation they give in [HI [17l [29] dif- 
fers somewhat from the asynchronous interpretation 
above; it can be formalised by means of the step tran- 
sition relation given by x — >c V & x Q U [HI l2"9"] . 
thereby dropping the asynchronicity requirement of 



Definition 12.11 This allows a set of events to occur 
in one step even if they cannot happen in any order. 

When using the translations between configuration 
structures and Petri nets described in Section fl~4] the 
Gupta-Pratt interpretation of configuration structures 
matches a firing rule on Petri nets characterised by the 
possibility of borrowing tokens during the execution of 
a multiset of transitions: a multiset U of transitions 
would be enabled under a marking M when M' := 
M - 'U + U* > 0. In that case U can fire under M, 
yielding M'. Thus the requirement that *U < M is 
dropped; tokens that are consumed by the transitions 
in U may be borrowed when not available in M, as long 
as they are returned "to the bank" when reproduced 
by the firing of U. 

Example 9 The configuration structure C = (E, C) 
with E — {a, b, c} and C — {0, {a}, {&}, {a, b, c}} mod- 
els a system in which the events a and b jointly cause 
c as their immediate effect, as it is impossible to have 
done both a and b without doing c also. Below are the 
representations of the same system as a propositional 
theory, an event structure and a Petri net. 



c <^ a A b 




{a,b}h{c} 

{c}h{a,6} 
h X for any X with 
{c}^X^{aM 



It takes the Gupta-Pratt interpretation to obtain the 
transitions {a} — >c {a, 6, c} and {&} — >c {a, b, c}, 
because under the asynchronous interpretation the 
configuration {a, 6, c} is unreachable. 

2.6 Finite vs. infinite steps 

In [12] we employed a variant of the transition relation 
of Definition 12. 1[ obtained by additionally requiring, 
for x — >c y, that y — x be finite. This transition 
relation can be motivated computationally by the as- 
sumption that only finitely many events can happen 
in a finite amount of time. 

In the present paper the asynchronous computa- 
tional interpretation of configuration structures given 
in Section [2~T1 will be our default; we refer to the inter- 
pretation of [12] as the finitary asynchronous interpre- 
tation, and denote the associated transition relation 
by —A 

The step transition relations — >^ and — ► on the 
configurations of Petri nets coincide; however, this is 
merely a spin-off of considering only finite configura- 
tions of nets. It would be more accurate to recognise 
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the step transition relation of Section 11.41 defined be- 
tween markings, and the inherited step transition re- 
lation between configurations, as finitary ones. 

It is tempting to generalise the firing rule of Def- 
inition 11.101 to infinite multisets. The simplest im- 
plementation of this idea, however, yields infinitary 
markings, as illustrated in Figure [3] After all transi- 




FlGURE 3: Unbounded parallelism 

tions ti (i 6 IN) of net I have fired (in one step) there 
are infinitely many tokens in place s, contrary to the 
definition of a marking. One way to fix this problem is 
to allow infinite markings. This, however, causes the 
problem illustrated by the net L: after transition t has 
fired countably often, are there tokens left to fire once 
more? Such problems appear best avoided by sticking 
to finitary markings. Another solution is to allow a 
multiset of transitions to fire only if by doing so none 
of its postplaces receives an infinite amount of tokens. 
This would enable any finite multiset over {£j \ i S N} 
to fire initially, but no infinite one. A disadvantage of 
this solution is that the nets I and J, which normally 
would be regarded equivalent, have now a different be- 
haviour, as in J all transitions U can still fire in one 
step. As a consequence, the theorem of [12] that any 
net is step bisimulation equivalent to a safe net, or a 
prime event structure, would no longer hold; I consti- 
tutes a counterexample. 

Therefore we stick in this paper to the convention, 
formalised by Definition II. 101 that only finitely many 



transitions can fire in a finite time. As a consequence, 
the transition t in net K can never fire and this net is 
semantically equivalent to I and J. 

3 Four notions of equivalence 

In this paper we compare configuration structures, 
pure event structures and pure 1-occurrence nets up 
to four notions of equivalence, the finest one of which 
is configuration equivalence. Two such structures are 
configuration equivalent iff they have the same events 
and the same configurations (taking the left-closed 
configurations of pure event structures). By Propo- 
sitions 12.11 and 12.21 this implies that they also have 
the same step transition relation between their con- 
figurations. On pure 1-occurrence nets configuration 
equivalence is defined in Definition 1 1.141 on pure event 
structures it is defined in Dcfinition ll.4l under the name 
C-equivalence and for configuration structures it is the 
identity relation. However, we can also compare nets 
with event structures, or any other combinations of 
models, up to configuration equivalence. The other 
three equivalence relations are obtained by restricting 
attention to the configurations that are finite, reach- 
able, or both, as we now see. 

Definition 3.1 Let C = (E,C) be a configuration 
structure. A configuration x s C is reachable if there 
is a sequence of configurations 

= .T > C X\ >C • • ■ >C %n = X. 

Let R(C) denote the set of reachable configurations 
and F(C) the set of finite configurations of C. The 
reachable part of C is given by 1Z(C) := (E, R{C)) and 
the finite part by JF(C) := (E, F(C)). 

A configuration structure C is connected if all its 
configurations are reachable, i.e., if TZ(C) = C. It is 
finitary if its configurations are finite, i.e., if .F(C) = C. 

Two configuration structures C and D are 

• configuration equivalent if C = D; 

• finitarily equivalent if ^(C) = .F(D) — cf. Def. 11.161 

• reachably equivalent if 1Z(C) = 7Z(D); and 

• finitarily reachably equivalent iflZ(J-(C))=7l(J-(D)). 
For E a pure event structure let C(E) be £(E), and 
for C a configuration structure let C(C) be C. Two 
structures K and L that may be configuration struc- 
tures, pure event structures or pure 1-occurrence nets 
are called configuration equivalent if the configuration 
structures C(K) and C(L) are configuration equivalent. 
The other three equivalences lift to general pure struc- 
tures in the same way. 

Proposition 3.1 Let C = (E,C) be a configuration 
structure, x G R(C) and Y CE. Then x — >n(c) Y iff 
x — » c Y. 
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Proof: Let x € R(C) and YCE. Then, 
x — > c Y iff (by Definitional]) 

iC7A VZ(x CZCY^ZeC)itt 

xCY AVZ. VW(x CWCZCY^>W,ZeC)iS 

xCY A VZ(x C Z CY ^ (Z eC Ax — > c Z)) iff 

x c y a vz{x c z c y z e i?(C)). □ 

In particular (taking Y~ S -R(C) above), the step tran- 
sition relation on 1Z(C) is exactly the step transition 
relation on C restricted to the reachable configurations 
of C. Likewise, the step transition relation on .F(C) is 
exactly the step transition relation on C restricted to 
the finite configurations of C. 

Proposition 3.2 For any configuration structure C 
one has K(K(C)) = 11(C) , T(T(C)) = T{C) and 
F(H(C))=n(T(C)). 

Proof: Straightforward, for the first statement using 
Proposition 13. II □ 

Thus, any reachable equivalence class of configuration 
structures contains exactly one connected configura- 
tion structure, which can be obtained as the reachable 
part of any member of the class. Likewise, any finitary 
equivalence class of configuration structures contains 
exactly one finitary configuration structure, which can 
be obtained as the finite part of any member of the 
class. Finally, any finitary reachable equivalence class 
of configuration structures contains exactly one config- 
uration structure that is both finitary and connected; 
it can be obtained as the reachable part of the finite 
part of any member of the class. 

By definition, C(N) is finitary for any pure 1- 
occurrence net N. Hence on pure 1-occurrence nets, 
finitary equivalence coincides with configuration equiv- 
alence, and finitary reachable equivalence with reach- 
able equivalence. 

If in Definition ^. ll we would have defined reachabil- 
ity in terms of the step transition relation formalising 
the Gupta-Pratt interpretation of configuration struc- 
tures (cf. Section 123)) . either all or no configurations 
of a configuration structure C would be reachable, de- 
pending on whether or not C is rooted. If we would 
use the step transition relation — >^ formalising the 
finitary asynchronous interpretation (cf. Section |2T6|) . 
what we would get as 1Z(C) is actually 1Z(J-(C)). 

When dealing with systems that merely take a fi- 
nite number of transitions in a finite amount of time, 
only their reachable parts are semantically relevant. In 
this setting it makes sense to study configuration struc- 
tures, pure event structures and pure 1-occurrence nets 
up to reachable equivalence. When moreover assum- 
ing that only finitely many actions can happen in a 



finite amount of time, it even suffices to work up to 
finitary reachable equivalence. 

Clearly, reachable equivalence is coarser than con- 
figuration equivalence. The following example illus- 
trates for event structures that this is strictly so. 

Example 10 Let E = {E, h) be the event struc- 
ture with as events the set Q of rational numbers, 
h X for any X with \X\ ^ 1, and X h {e} iff 
X = {d £ <$ \ d < e}. Then L(E) consists of all down- 
wards closed subsets of rational numbers and thus 
contains representatives of all reals as well as extra 
copies of the rationals and Q itself (infinity); however 
R(C(E)) = {0}. So if F is (Q, {0 h0}) then E and F 
are reachably equivalent, yet L(E) ^ L(F). 

This example also illustrates that the justification of 
working up to reachable equivalence depends on the 
precise computational interpretation of event struc- 
tures. 

We have established the bijective correspondences 
between configuration structures, prepositional theo- 
ries, pure event structures and pure 1-occurrence nets 
up to the finest semantic equivalence possible. This 
way our correspondences are compatible, for instance, 
with the Gupta-Pratt interpretation of configuration 
structures. Under this interpretation, unreachable 
configurations may be semantically relevant, as wit- 
nessed by the notions of causality and internal choice 
in [TBI [55] (see Example^ and that of history preserv- 
ing bisimulation in [17) . 

3.1 Hyperreachability 

Below we consider a class of STZ-secure configuration 
structures, on which we define the hyperconnected con- 
figuration structures as alternative canonical represen- 
tatives of reachable equivalence classes, and we pro- 
pose a function S that transforms each SIZ-secure con- 
figuration structure into an alternative normal form: 
the unique hyperconnected configuration structure in- 
habiting a reachable equivalence class of 57?.-secure 
configuration structures. We also show that the func- 
tion S o T transforms each configuration function into 
an alternative canonical representation of its finitary 
reachable equivalence class. As we will show in Sec- 
tion [U it is the function S that generalises the notion 
of configuration employed in Winskel [MJ [35] . 

Definition 3.2 Let C = (E, C) be a configuration 
structure. A set of events X C E is hyperreachable, 
or a secured configuration of C, if X = {J°Z Xi for an 
infinite sequence of configurations 

= x — > c xi — >c x 2 — >c 
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Let 5(C) be the set of secured configurations of C, and 
write 5(C) := (E, 5(C)). The structure C is hypercon- 
nected if 5(C) = C. 

The secured configurations include the reachable ones 
(just take Xi — x n for i > n). Whereas reachable 
configurations could be regarded as modelling possi- 
ble partial runs of the represented systemQ happening 
in a finite amount of time, secured configurations ad- 
ditionally model possible total runs, happening in an 
unbounded amount of time. 

Proposition 3.3 Let C be a configuration structure. 
Then 5(C) = 5(72(C)) and i?(C) C R(S(C)). 

Proof: The first statement follows immediately from 
Proposition 13.11 the second holds because — >iz(C) Q 

y S(C)- D 

However, it is not always true that 72(5(C)) = 11(C). 

Example 11 Take E:—¥l and C:=7fi n (fi) consisting 
of all finite subsets of IN. Then 5(C) = ?QN) and in 
the configuration structure 5(C) one has — *S(G) A 
for every X C N. Thus R(S(C)) = T(N), whereas 
R(C) = ? fin (N). 

It is also not always the case that 5 (5(C)) = 5(C); 
finding a counterexample is left as a puzzle for the 
reader. The problem underlying Example [11] is that 
the induced step transition relation on 5(C) may differ 
from the one on C, even when restricting attention to 
transitions originating from reachable configurations 
of C (and hence of 5(C)). Thus the map 5 may al- 
ter the computational interpretation of configuration 
structures as proposed in Section [2] We now charac- 
terise the class of configuration structures for which 
this does not happen. 

Definition 3.3 A configuration structure C is 572.- 
secure iff 7£(5(C)) = 11(C) . 

Observation 3.1 A configuration structure C=(E,C) 
is 572-secure iff for all x £ -R(C) and all Y C E one has 

x — >s(c) y iff a — >c Y. 

A configuration structure C = (E, C) with 5(C) C C, 
i.e., for which all its secured configurations are in fact 
configurations, is certainly 572-secure. Proposition l3.3l 
yields: 

4 The idea of a configuration modelling a possible partial run 
is consistent with the idea that it also models a possible state 
of the represented system, namely the state obtained after exe- 
cuting all the events that make up the run. 



Proposition 3.4 Let C be an 572-secure configura- 
tion structure. Then 5(5(C)) = 5(C), i.e., 5(C) is 
hyperconnected. □ 

If a configuration structure C is 572-secure, then so are 
72(C) and 5(C). However, it is not the case that .F(C) 
is always 572-secure when C is; a counterexample is 
the 572-secure configuration structure C := (N, 3 (N)): 
here .F(C) is the 572-insecure configuration structure 
of Example QT] 

Proposition 3.5 Let C and D be 572-secure configu- 
ration structures. Then K(C)= 72(D) iff 5(C) = 5(D). 

Proof: It follows from Proposition 13.31 that 5(C) is 
completely determined by 72(C), whereas by Defini- 
tion [3?3] 72(C) is completely determined by 5(C). □ 

Proposition 13. 51 savs that two 572-secure configuration 
structures are reachable equivalent iff they have the 
same secured configurations. Thus, in any reachable 
equivalence class of 572-secure configuration structures 
there are two normal forms: a connected configura- 
tion structure that can be obtained as 72(C) for C an 
arbitrary member of the class, and a hyperconnected 
configuration structure that can be obtained as 5(C) 
for C an arbitrary member of the class. In the sequel 
we will often use the normal form 5 when dealing with 
event structures, as our notion of a secured configura- 
tion of an event structure is the one that generalises 
the notion of configuration of pHl [35] . 

Examplc[Tl]shows that for C an 572-insecure config- 
uration structure, 5(C) need not be reachable equiv- 
alent with C. Therefore, when working up to reach- 
able equivalence, we will not study the configuration 
structures 5(C) for 572-insecure C. However, this re- 
striction is not needed when working up to Unitary 
reachable equivalence, as we will show below. 

Proposition 3.6 Let C be a configuration structure. 
Then ^(5(C)) = T(K(C)). 

Proof: That any finite secured configuration is reach- 
able follows directly from Definition 13.21 whereas "3" 
follows from the earlier observation that 5(C) D 72(C). 
□ 

Proposition 3.7 Let C be a configuration structure. 
Then 72(.F(5(C))) = H(T(C)), i.e., 5(C) is finitarily 
reachably equivalent with C. 

Proof: n(F(S(C))) ^K(F(K(C))) l Pft(^'(C)). □ 
Proposition 3.8 For configuration structures C,D: 
K(F(C)) = K(F(p)) iff 5(JF(C)) = 5(JF(D)). 
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Proof: It follows from Proposition 13.31 that S(T(C)) 
is completely determined by TZ(T(G)), whereas Propo- 
sitions and (or ET7J) imply that TZ(T(C)) is com- 
pletely determined by <S(.F(C)). □ 

Thus, in any finitary reachable equivalence class of 
configuration structures there are two normal forms: 
a finitary and connected configuration structure that 
can be obtained as 1Z(J-(C)) for C an arbitrary mem- 
ber of the class, and a configuration structure that can 
be obtained as S(J-(C)) for C an arbitrary member of 
the class. 

3.2 Petri nets 

In this section we directly define the reachable con- 
figurations of a Petri net, and observe that for pure 
1-occurrence nets this definition agrees with Defini- 
tion 13.11 Moreover, we infer that finitary, connected 
rooted configurations structures are canonical repre- 
sentatives of equivalence classes of nets that have the 
same reachable configurations. 

Definition 3.4 The set i?(N) of reachable configura- 
tions of a Petri net N = (5, T, F, I) consists of the 
multisets £™ =1 C/ n such that there is a firing sequence 



M n . 



In case N = (5, E, F, I) is a pure 1-occurrence net, we 
write K(N) := (E,R(N)). 

Proposition 3.9 If N is a pure 1-occurrence net, then 
ft(N) =U(C(N)). 

Proof: Immediate from Definitions 13.11 and 12.21 using 
Proposition 12. II □ 

The configuration structure 1Z(N) is always rooted, 
finitary and connected. Moreover, combining Proposi- 
tion [39] with Corollary Q] yields: 

Proposition 3.10 For every rooted, finitary and con- 
nected configuration structure C there exists a pure 
1-occurrence net N without arcweights, such that 
K(N) = C. □ 

Thus, we have established a bijective correspondence 
between pure 1-occurrence nets (with or without arc- 
weights) up to reachable equivalence and finitary, con- 
nected, rooted configuration structures. 

3.3 Event structures 

In this section we define the four notions of configura- 
tion S, TZ, 1Z o T and 5 o T directly on event struc- 
tures, and observe that for pure event structures these 



definitions agree with Definitions 13.11 and 13.21 In Sec- 
tion [4] we will show that our secured configurations 
generalise the configurations of the event structures 
that appear in Winskel [MJ |35] . As the family of 
all configurations of an event structure from [341 135] 
is completely determined by the subfamily of its finite 
configurations, in : IT| attention has been restricted to 
finite configurations only. A generalisation of these fi- 
nite configurations to the event structures of this paper 
are our finite reachable configurations below. 

Definition 3.5 The set 5(E) of secured configura- 
tions of an event structure E = (E, C) consists of the 
sets of events USo with Xo — such that 

Vi S N. Xi C X l+1 AWC Xj+i. CI,.Zh Y. 

The set i?(E) of reachable configurations of E consists 
of the sets of events U"=o ^ w ^ n A = sucn that 

Vi < n. X t C X i+ i AVFC X l+1 . 3Z C X,. Z h Y. 

The set Rf(E) of finite reachable configurations of E 
consists of the sets of events {ei, . . . , e„} such that 

Vi <n.VFC {ei, ej. 3Z C {e x , e,_i}. Z h Y. 

Finally, the set 5/(E) extends i?/(E) with the infinite 
sets of events {ei, . . .} such that 

Vi eN.WC {ei, ej. 3Z C {ei, e,-!}. ZVY. 

The secured configuration structure associated to E is 
5(E) := (E, 5(E)). Likewise, let 11(E) := (E, i?(E)), 
%(E) := (E,R f (E)) and 5/(E) := (E,S f (E)). 
An event structure E is SK-secure iff 1Z(S(E))=Tl(E). 

Thus X G 5(E) iff X = U~ Q Xi for a sequence 

= Xq >e X\ >e X2 >E ■ • ■ 

and likewise for i?(E). Again, the secured configura- 
tions include the reachable ones (just take Xi := X n 
for i > n). We call a sequence Xq, Xi, . . . as occurs in 
the definitions of 5(E) and i?(E) a stepwise securing of 
X; a sequence ex, e^, ■ ■ ■ as occurs in the definitions of 
Rf(E) and 5/(E) is an eventwise securing of X. Com- 
putationally, a stepwise securing can be understood to 
model a particular run of the represented system by 
partitioning time in countably many successive inter- 
vals Ik (k > 1). The set Xk — Xk-i contains the events 
that occur in the interval Ik ■ These events must be en- 
abled by events occurring in earlier intervals. The set 
X contains all events that happen during such a run. 
An eventwise securing can be understood by imposing 
the restriction that \Xk — Xk—i\ — 1, i.e., in each inter- 
val exactly one event takes place. We now show that 
Rf{E) consists of the finite configurations in R(E). 



16 



Proposition 3.11 Let E be an event structure. Then 
Tl f (E) = T{Tl{E)) = .F(5(E)). 

Proof: Given X G i?/(E), let ei, . . . , e„ be an even- 
twise securing of X. Take Xj := {ei, ...,e»} for 
i = 0, 1, . . . , n. Then Xq, . . . , X„ is a stepwise securing 
of X. As X is finite we have X G F(7£(E)). 

Given X G F(7^(E)), let X , . . . ,X n be a stepwise 
securing of X. Removing duplicate entries (where 
= X with 1 < i < n) from this sequence pre- 
serves the property of the sequence being a stepwise 
securing. Furthermore, if Xi-% C Y C Xi for some 
1 < i < n, then adding F between and Xi also 

preserves the property of the sequence being a step- 
wise securing. In this way (using that all Xi are finite) 
the stepwise securing Xq, ...,X n can be modified into 
a stepwise securing Yq, Y m with \Yi — = 1 for 

i = 1, m. The latter can be written as an eventwise 
securing. 

That .F(ft(E)) = .F(S(E)) is trivial (cf. Pr.[32|). □ 

The proof above shows that events cannot be "syn- 
chronised" in event structures. If a finite number of 
events takes place simultaneously, they could just as 
well have occurred one after the other, in any order. 

Proposition 3.12 Let E be a pure event structure. 
Then K{E) = K(£{E)) and 5(E) = 5(£(E)). More- 
over, K f (E) = K(F(£{E))) and 5/(E) = S(T(C(E))). 

Proof: The first two statements follow directly from 
Definitions 13. 11 respectively 13. 21 and !2.31 using Propo- 
sition 12.21 The third statement now follows from 
Proposition 13.111 the first statement, and Proposi- 
tion o 

For the last statement, let X G S/(E). In case X 
is finite, X G R f (E) = R(F(£(E))) C S(T(£((E))). 
Otherwise, let e\, e2, . . . be an eventwise securing of X. 
Let Xi~{ei, . . . ,e,} for i>0. Then X G F(£(E)) for 
i G IN and = X — > £(E) X 1 — > £(E) X 2 — > C (E) ■ • ; 
so X = U^ Xi G S(F{C{E))) by Definition O 

Conversely, let X G S(T(£(E))). Then, by Defini- 
tion^ X = U 4 =o^ for x i e F (£( E )) (* e N ) such 
that = X >£( E ) X\ —*C(E ) ^2 >£(E) ■ • •• As 

in the proof of Proposition 13.111 this sequence can be 
modified into a finite or infinite sequence yi G F(£(E)) 
with = j/o — >£(E) 2/i — >x(E) 2/2 — >£(E) • • ■ and 
2/i — = 1 for relevant all i > 0. By Proposition ^. 21 
we have = y — > E Vi — >e 2/2 — >e • • ■• Writing a 
for the unique clement of j/j — for i > 0, Defini- 
tion [2T3] yields that ei, e2, • • • is an eventwise securing 
of X. Hence X = {ei,e 2 ,...} G S f (E). □ 

Corollary 2 A pure event structure E is 57?.-secure 
iff £{E) is an 57?.-secure configuration structure. 



Proof: Let E be pure. If E is 57<!.-secure then 
U{S{£{E))) = Tl{S{E)) = 5(E) = 5(£((E)). 

Conversely, if £(E) is 57?.-secure then 

TZ(S(E)) = R(S(£(E))) = 5(£((E)) = S(E). □ 

Corollary 3 Let E be a pure and 57£-secure event 
structure. Then 5(E) is hyperconnected. Conversely, 
if C is a hyperconnected configuration structure, then 
£ (C) is a pure and 57?.-secure event structure. □ 

Using Theorem [2 Proposition 13. 121 yields 

Proposition 3.13 Let C be a connected configura- 
tion structure. Then U(£(C)) = C. 

Proof: K(£(C)) = K(£{£(C))) = K(C) = C. □ 

Likewise, if C is a hyperconnected configuration struc- 
ture then 5(£(C)) = C; if C is a unitary connected 
configuration structure then lZf(£(C)) = C; and if C 
is a configuration structure of the form 5(D) with D a 
unitary configuration structure then <S/(£(C)) = C. 

Thus JZ and £ provide a bijective correspondence 
between pure event structures up to reachable equiv- 
alence and connected configuration structures (using 
Proposition 13.121 Definition 13.11 Theorem [2] and the 
above). Likewise, 5 and £ provide a bijective corre- 
spondence between pure and 572.-secure event struc- 
tures up to reachable equivalence and hyperconnected 
configuration structures (additionally using Corollar- 
ies [3] and [5] and Proposition I3.5|) : IZf and £ provide 
a bijective correspondence between pure event struc- 
tures up to finitary reachable equivalence and unitary 
connected configuration structures; and 5/ and £ pro- 
vide a bijective correspondence between pure event 
structures up to finitary reachable equivalence and 
configuration structures of the form 5(D) with D fini- 
tary (additionally using Proposition 13. 8[) . 

Impure event structures 

Proposition 13.121 does not extend to impure event 
structures. For those, their reachable configurations 
are not determined by their left-closed ones. 

Example 12 Let E := {{e},{0 h0, {e} h{e}}). Then 
£(E) = ({e},{0,{e}}), whereas 11(E) = ({e},{0}). 
Both configuration structures are connected. 

Let F := ({e}, {0 h0, h{e}}). Then we have 
£(E) = £(F) but TZ(E) ^ 11(F). 

When the step transition relation of Definition 12.31 is 
taken to be part of the meaning of an event struc- 
ture, neither the left-closed nor the reachable configu- 
rations capture the meaning of impure event structures 
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faithfully, as illustrated by the systems P and M men- 
tioned in Section [2731 When, on the other hand, the 
behaviour of an event structure is deemed to be de- 
termined by its configurations, then on impure event 
structures C and TZ represent mutually inconsistent 
interpretations. However, under either interpretation 
the impure event structures are redundant: for ev- 
ery event structure there exists a pure one with the 
same configurations. Obviously, which one depends on 
whether the left-closed or the reachable configurations 
are to be preserved. 

Proposition 3.14 For any event structure E there is 
a pure event structure Ec with C(Ec) = £(E), and a 
pure event structure E n with TZ(E R ) = 7Z(E). 

Proof: One can take Ec to be £(£(E)) and E-^ to be 

E(n(E)). □ 

A structure Ec = (E, \~c) can also be directly obtained 
by putting h £ := {(X - Y, Y) \ X h Y}. 

Proposition 13.141 shows that any event structure 
could be transformed into a pure one, while preserv- 
ing its reachable configurations. However, there is no 
way to purify any event structure while preserving its 
secured configurations: 

Example 13 Let E = (E, h) be given by E := NU{e}, 
{n} h {n + 1} and {n} h {e,n} for n G IN and 
h X for X not of the form {n + 1} or {e, n}. Then 
R(E) = {{i | i < n},{i | i < n} U {e} | n G IN}, 
5(E) = i?(E)U{W} and L(E) = 5(E)U{lNU{e}}. The 
configuration IN U {e} is not secured, because count- 
ably many stages are needed to perform the events in 
IN, and whenever both e and n happen, n needs to 
happen first. Using Proposition 13. 121 5(E) cannot be 
the set of secured configurations of a pure event struc- 
ture, because 5(E) is not of the form 5(C): as R(C) 
would contain all sets {i | i < n}U{e} for n G IN, 5(C) 
would also contain their limit IN U {e}. 

As E above is 57?.-secure, Example [TBI also shows that 
Corollary [3] does not extend to impure structures. 

Reachably pure event structures 

For impure event structures, the functions C, TZ, 5, IZf 
and Sf do not reflect the step transition relation be- 
tween configurations and hence may translate an event 
structure into a configuration structure with a different 
computational interpretation. This is illustrated by 
the event structure M of Section l2~3l for which we have 
—/^m {d,e} but — >s(m) {d 7 e}. We now extend 
the class of pure event structures to a slightly larger 
class of reachably pure event structures, on which the 



functions TZ, 5, IZf and Sf, but not C, still preserve 
the computational interpretation of event structures. 
This extension is necessary in order to cast the event 
structures of Winskel [SUES] as special cases of ours, 
for they translate into our framework as event struc- 
tures that are reachably pure but not pure. 

Definition 3.6 An event structure is reachably pure 
if X h Y only if either XnY = 9orYCX. 

The event structure E of Example [12] for instance is 
reachably pure, but not pure. 

Proposition 3.15 For every reachably pure event 
structure E there exists a pure event structure E such 
that X — > fe Y iff X — > E Y for all X G L(E) C L(E) 
and Y <Z E with X ^ Y. Also, if E is rooted, so is E. 

Proof: Obtain E by omitting all enablings X h Y 
with l^yci. Apply Definition O □ 

Corollary 4 For any reachably pure event structure 
E one has ft(E)=ft(E), 5(E) = 5(E), lZ f {E) = lZ f {E) 
and 5/(E) = 5/(E). Moreover, E is 57?.-secure iff E is. 

However, in Example [T2l we have C(E) ^ £(E). 

With the above results and Proposition 13.121 all 
results for configuration structures in this section, 
namely Propositions 13.1113.81 and Observation 13. 1[ lift 
to reachably pure event structures: 

Corollary 5 Let E = (E, h) be a reachably pure event 
structure, x G R(E) and Y C E. Then x — >k(e) Y 
iff x — > E Y. □ 

Corollary 6 A reachably pure event structure E = 
(E, h) is 5^-secure iff for all x G R(E) and all Y C E 
one has x — *S(E) Y iff x — >e Y. □ 

Corollary 7 For any reachably pure event structure 
E it holds that TZ(TZ(E)) = 11(E), S(TZ(E)) = 5(E), 
R(E) C R(S(E)) and F{1Z{E)) = F{1Z{S{E))). □ 

Corollary 8 For any reachably pure and 57?.-secure 
event structure E it holds that 5(5(E)) = 5(E), i.e., 
5(E) is hyperconnected. □ 

Corollary 9 Let E and F be reachably pure and 57?.- 
secure event structures. Then 1Z{E) = 1Z{E) iff 5(E) = 
5(F). □ 

Corollary 10 Let E, F be reachably pure event struc- 
tures. Then 1Z S {E) = 1Z f (F) iff 5/(E) = 5/(F). □ 

We call two reachably pure event structures E and F 
reachably equivalent iff 1Z(E) — 7Z(F) and finitarily 
reachably equivalent iff IZf (E) — 72./ (F). Restricted 
to pure event structures these definitions agree with 
Definition 13.11 
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Secure event structures 

When dealing with secured configurations, we will 
mainly be interested in event structures E that are 
reachable pure and SIZ-secme, and satisfy 5(E) C 
L(E). The third property says that all secured con- 
figurations of E are in fact left-closed configurations. 
Together, these three properties ensure that the com- 
putational behaviour of E is adequately represented 
by 5(E). An event structure with these properties is 
called secure. 

Proposition 3.16 If C is a hyperconnected configu- 
ration structure, then £ (C) is secure. 

Proof: Hyperconnected configuration structures are 
iS7?.-secure, so that £ (C) is pure and 57?.-secure follows 
from Corollary [5J Moreover, using Proposition 13.121 
S(£(C)) = S{C(£(C))) = 5(C) = C = C(£ (C)). □ 

Thus 5 and £ provide a bijective correspondence be- 
tween secure event structures up to reachable equiva- 
lence and hyperconnected configuration structures. 

Remark For reachably pure event structures E, 
unlike for configuration structures, the requirement 
5(E) C L(E) does not imply 57£-security. Moreover, 
this requirement would be insufficient in Corollary 

Example 14 Take E := (N, h) with h A for A 
finite, and X h X otherwise. This event structure is 
reachably pure and satisfies 5(E) C L(E). However, 
R(E) = Vfin(N), yet R(S(E)) = ?(N). 

Take F := (N, K) and h' X for all X. The event 
structures E and F have the same secured configura- 
tions, yet are not reachably equivalent. 

4 Other brands of event structures 

Event structures have been introduced in Nielsen, 
Plotkin & Winskel [35J as triples (E, <,#), in 
WiNSKEL [33] as triples (E, Con, h) and (E, Con, <), 
and in WiNSKEL [35J as triples (E, #, h) and (E, #, <) 
— a special case of those in [25J. Here we will explain 
how our event structures generalise these previous pro- 
posals. The components Con, h and < that occur 
in the triples mentioned above can be defined in terms 
of our event structures as follows. 

Definition 4.1 Let E = (E, h) be an event structure. 
A set of events X C E is consistent, written Con(X), 
if 

vy C X. 3Z C E. Z h Y. 

The binary conflict relation # e £ x £ is given by 
d#e iff d ^ e A -nCon({d, e}). Write fCon(X) for "A 



is finite and consistent" — this is our rendering of the 
component Con in [34]. For X C^„ E and e E E, 
write A h s e for 

fCon{X) A ar C A. y h {e}. 

The direct causality relation -< C E x £ is given by 

d^e^VI. (Ih {e} d e A). 

We take the causality relation, <, to be the reflexive 
and transitive closure of -<. 

The next definition gives various properties of our 
event structures which, in suitable combinations, de- 
termine subclasses corresponding to the various event 
structures in [231 154] [55] . 

Definition 4.2 An event structure E = (E, h) is 

• singular if X H Y X = V |Y| = 1, 

• conjunctive if X { h Y (i £ I ^ 0) => f) ie i %i ^ Y > 

• locally conjunctive if A, h Y (for i G / ^ 0) A 

c 0?l (u ieJ A i uy)^n ie 7^^^ 

• S -irredundant if every event occurs in a secured 
configuration, i.e., E = U^es(E) x ' 

• C-irredundant if every event occurs in a left-closed 
configuration, i.e., E — Ua;eL(E) x i 

• and cycle-free if there is no chain 

eo -< ei -< • • • -< e„ -< e 

and has 

• finite causes if A h y =>■ A finite, 

• finite conflict if A infinite => h A 

• and binary conflict if|A|>2=>0hA. 

As we will explain below, the event structures of 
[25l [34l [35] all correspond to event structures in our 
sense that are rooted, singular and with finite conflict. 
The event structures given as triples involving # even 
have binary conflict, the ones from [331 H5J have fi- 
nite causes, and the ones involving < are conjunctive, 
£-irredundant and cycle-free. The event structures of 
[34l [35] that involve < are moreover 5-irredundant, 
a property that implies £-irredundancy and cycle- 
freeness. The requirement of stability in [34, 35 cor- 
responds to our notion of local conjunctivity. 

Each of the correspondences above will be estab- 
lished by means of evident translations from the class 
of event structures from [551 1331 131] under considera- 
tion to the class of our event structures with the men- 
tioned properties, and vice versa. These translations 
will preserve the sets of events of related structures as 
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ev. str. [34] Con,\- 
stable [34] Con,\- 
prime [31] Con, < 
ev.str. [35] #,h 
stable [33 #, h 
prime [33 #, < 
ev. str. [25] #, < 



rtd, sing, f.causes & f.conflict 5 

same & locally conjunctive 5 

same & conjunctive & S-irr. 5, C 

rtd, sing, f.causes & bin. conflict 5 

same & locally conjunctive S 

same & conjunctive & 5-irr. 5, £ 

rtd, sing, b.c, conj, £-irr & c.-f. C 



Table 1: 7 corresponding classes of event structures 

well as their configurations. However, which configura- 
tions will be preserved varies, as indicated in Table [1] 
The configurations employed in [311 correspond to 
our secured configurations, whereas the configurations 
employed for event structures involving < correspond 
to our left-closed configurations. In the intersection of 
those two situations, the secured and left-closed con- 
figurations of event structures coincide. 

Definition 4.3 An event structure is manifestly con- 
junctive if for every set of events Y there is at most 
one set X with X h Y. 

Every conjunctive event structure can be made man- 
ifestly conjunctive by deleting from h, for every set 
Y, all but the smallest X for which X h Y. The 
property of conjunctivity implies that such a smallest 
X exists. This normalisation preserves ^-equivalence 
and even transition equivalence (cf. Definition 1 2. 4p and 
all properties of Definition 14.21 The event structures 
in our sense that arise as translations of event struc- 
tures from [25] [3H [35] that involve < are all manifestly 
conjunctive. 

Observation 4.1 Any singular, cycle- free, manifestly 
conjunctive event structure is pure. 

Hence the translations between the event structures 
from [25] [34] [35] involving < and subclasses of our 
event structures will preserve not only £-equi valence, 
but even transition equivalence. 

Lemma 1 If E has finite conflict, then S(E) C L(E). 

Proof: Let X 6 5*(E) and let Xo, Xi, ... be a stepwise 
securing of X. Let Y C X. Then either Y is infinite 
and h Y or Y is finite and hence contained in Xi + i 
for some i G N. In the latter case 3Z C Xi C X with 
ZVY. □ 

Observation 4.2 

Any singular event structure is reachably pure. 

Proposition 4.1 Any singular event structure with 
finite conflict is isecurei 



Proof: Let E be a singular event structure with fi- 
nite conflict. Then the event structure E, as defined 
in the proof of Proposition 13.151 is pure and with fi- 
nite conflict. Lemma Q] yields 5(E) C L(E). Hence, 
R(S(E)) = R(S(E)) C R(C(E)) = i?(E) = R(E). The 
other direction follows from Corollary [7] □ 

As all event structures of [25] [34] [35] correspond to 
event structures in our sense that are singular and with 
finite conflict, they all fall in the scope of Corollaries [5] 
and [5J so reachable equivalence preserves the compu- 
tational interpretation of event structures and is char- 
acterised by having the same secured configurations. 
Hence the translations between the event structures 
from [3H [35] and subclasses of our event structures 
will preserve reachable equivalence. We will show that 
they also preserve /^-equivalence, and even transition 
equivalence (cf. Definition 12. 4[) ; however, this involves 
defining the left-closed configurations and a transition 
relation on the structures of [3H [35] . 

4.1 Left-closed configurations and transitions 

For singular event structures E, the enabling relation 
consists of two parts: enablings of the form h Y with 
\Y\ ^ 1, and enablings of the form X h {e}. When E 
has finite conflict, the first part can be fully expressed 
in terms of fCon, at least to the extent to which it de- 
termines which sets of events are configurations. When 
E has finite causes, the second part can similarly be 
expressed in terms of h s . One obtains the following. 

Observation 4.3 Let E be a singular event structure 
with finite causes and finite conflict. Then 

(XCY AVZC fin Y.fCon(Z) A i 
>e r ^ | V e e Y. 3WCX.W h s e. 

It follows that such structures can alternatively be rep- 
resented as triples (E,fCon,h s ) with fCon C Vfi n (E) 
and h s C fCon x E, as are the structures of [34] . 

When E moreover is rooted and with binary con- 
flict, fCon, when applied to non-singleton sets, can be 
fully expressed in terms of ff. 

Observation 4.4 Let E be a rooted, singular event 
structure with finite causes and binary conflict. Then 

Y y ^/lcyAVd,eeF..(#e)A 
E ^ \Ve G Y. 3W C X. W h s e. 

It follows that such event structures can alternatively 
be represented as triples (E, \- s ) with # C E x E 
symmetric and irreflexive and h s C fCon x E, as are 
the structures of [35] . 

5 Note that X £ L(E) iff X >e X. Hence, characterisations 

of — >e such as this one entail also characterisations of L(E). 
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When d < e, any configuration containing e also 
contains d. When E = (E, h) is conjunctive and satis- 
fies Con({e}) for all ee£, then for any event e££ 
there is a smallest set X C _E with X h e. In that 
case, the part of the enabling relation consisting of en- 
ablings X h e is in essence completely determined by 
the causality relation <. 

Observation 4.5 Let E = (E, h) be a singular, con- 
junctive event structure with finite conflict, such that 
Con({e}) for all e G £. Then 



X e L(E) <^> 



VYC^ X/Con(Y)A 



v Vd, eeE.d<eeX^deX. 
If E moreover is rooted and with binary conflict, then 



X G i(E) O 



Vd, eel. ->(d#e) A 

Vd, eeE.d<eeX^>deX. 



It follows that, up to ^-equivalence, such structures 
can alternatively be represented as triples (E,fCon, <) 
with /Con C 7fi n {E) and < C £ x £, as are the 
prime event structures of [313, respectively as triples 
(E, #, <), as are the prime event structures of [25l [35] . 

4.2 Secured configurations 

In this section we augment Observations l4.3l to l4.5l with 
characterisations of the secured configurations. To this 
end we first provide a characterisation of the finite 
reachable configurations of singular event structures. 

Observation 4.6 Let E be a singular event structure. 

Th6n (fCon(X)A 

X e R f {E) «*■ I 3ei, . . . , e„ G X. X = {e x , e„} A 
[Vi < n. {ex, ej_i} h s e,. 

If E is furthermore rooted and with binary conflict, 
then 

f Vd, e G X. -.(d#e) A 
X G i?/(E) <s> ^ 3ei, . . . , e n G X X = {ei, e„} A 
[Vi < n. {ei,...,ei_i} \- s e*. 

The next proposition says that for certain event struc- 
tures, including the ones from |34[ [35], the secured 
configurations are completely determined by the finite 
reachable ones. In addition, it provides the counter- 
part of Observation ^. 31 for the secured configurations. 

Proposition 4.2 Let E = (E, h) be a singular event 
structure with finite causes and finite conflict. Then 

x g 5(E) ^ vy c fin x. 3Z e R f (E). raci, 

i.e., 5(E) is the set of directed unions over 7?./(E), and 

(VKCyfc X. fCon(Y)A 
X G 5(E) < Ve G X. 3e , . . . , e„ 6 X. e = e„ A 
I Vi < ra. {e , ...,ej_i} h s e^. 



Proof: above": Let X G 5(E) and Y C fin X. 
Let Xo,Xi,... be a stepwise securing of X (cf. Def- 
inition 13 . 5[) and choose n in IN such that Y C X„. 
For fc = n,n — l,n — 2,...,0 choose the finite subset 
Yfc of Xfc recursively as follows. Y n — Y. Given Yj. 
with 1 < k < n, choose for any event e G Yfc a set 
Z e C X fe _i with Z e h e, and let Y fe _i = [j eeYk Z e- Be- 
cause E has finite causes, the sets Z e are finite, and so 
is Yfc_i . As E is singular we have h Z for any ZCX 
with Z 7^ 1. Therefore the sets U«=o^ f° r k < n 
form a stepwise securing of the finite set Z = UILq ^i- 
Hence Z G i?/(E). Furthermore we have Y C Z C X. 
follows immediately from Observation [46] 
"<=, below" : Let X C E be such that the right-hand 
side holds. Take X n+ i := {e n | 3eo, . . . , e„_i G X. 
Vi <n. {eo, e^-i} h s e^} for uGlN, and take Xq := 0. 
Now X = 1J^L X n . As a sequence eo, e n as occurs 
above can be prolonged by repeating events, we have 
X„ C X„ + i for all n G N. Let 7 C X n+1 . It re- 
mains to be shown that 3Z C X„. Z h Y. In case 
Y is infinite, this follows because E has finite con- 
flict. Otherwise, if Y ^ 1 it follows because E is 
singular and fCon(Y). Now suppose |Y| = 1. Then 
3e ,...,e„ G X. Y = {e„} A Vi < n. {e , e^-i} h s e 4 . 
So in particular 3Z C {eo, ...,e„_i}. Z h Y. We have 
ZQ\Jl =1 Xi=X n . □ 



Thus, recalling Observation 14. 2\ Proposition 14.11 and 
Corollary [9] for singular event structures with finite 
causes and finite conflict we have 

K(E) = K(F) iff 5(E) = 5(F) iff K f {E) = K f (F). 



In both statements of Proposition 14.21 requires 
singularity and finite causes, and singularity 
and finite conflict. That these conditions cannot be 
dropped follows from the following counterexamples. 

• Let E be uncountable let h X for every finite set 
X (with no other enablings). This event structure 
is singular and has finite causes, but does not have 
finite conflict, and "<=" fails for uncountable X. 

• Let E be uncountable, with X h Y iff X = and 
Y is empty or infinite, or Y is finite and X con- 
tains one event less. This event structure has finite 
causes and finite conflict, but is not singular, and 

fails for uncountable X (even though such X 
are left-closed configurations). 

• Let E := K U {a}, h X for any X ^ {a}, and 
W h a. This event structure is singular and has 
finite conflict, but does not have finite causes, and 
"^>" fails for X = E. 

• Let E := NU{a}, {0} h a, {n+1} h {a, n} and h 
X for any other set X. This event structure has 
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finite causes and finite conflict, but is not singular, 
and "=*►" fails for X = E. 

The following counterpart of Observation ^. 4l is an easy 
consequence. 

Observation 4.7 Let E be a rooted, singular event 
structure with finite causes and binary conflict. Then 

fWd,e £ X. -.(<2#e) A 
X G 5(E) <=> < Ve G X. 3e , . . . , e n G X. e = e n A 
[Vi < n. {e , e 4 _i} h s e*. 

For X a left-closed configuration of a singular, con- 
junctive event structure and eo 6 I we say that eo 
can happen at stage n, if there is no chain e„ -< • • • -< 
ei -< eo. Now we have X G 5(E) iff each event in X 
can happen at some finite stage. It follows that: 

Observation 4.8 Let E = (E, h) be a singular, con- 
junctive event structure. Then 

1. leL(E) Con{X)/\\Jd,e<EE. d<eeX deX. 

2. E is £-irredundant iff Ve G E. Con({d \ d < e}). 

3. E is <S-irredundant iff E is £-irredundant and for 
every e G E there is an n G IN such that there is 
no chain e n ~< ■ ■ ■ -< e% ~< eo = e. 

4. In case E is cycle-free we have 

X e R f (E) ^> X e L(E) A X is finite. 

5. If E is 5-irredundant then L(E) C 5(E). 
Together with Lemma [T] this yields 

Corollary 11 Let E = (E, h) be a singular, conjunc- 
tive, 5-irredundant event structure with finite conflict. 
Then 5(E) = £(E). □ 

4.3 The event structures of Winskel [34J 
These are defined as triples E = (E,Con,\~) where 

• E is a set of events, 

• Con C tyfin^E) is a nonempty consistency predi- 
cate such that: 7 CIc Con => y G Con, 

• and hC Con x _E is the enabling relation, which 
satisfies XheAXCYe Con =>Fhe. 

Such an event structure is stable if it satisfies 

XheAFheA Con{X UYU {e}) X n Y h e. 

The family 5(E) of configurations of such an event 
structure (written .F(E) in [34]) consists of those X C 
_E which are 

• consistent: every finite subset of X is in Con, 



• and secured: Ve G -?T. 3eo, . . . , e n e X. e n = e A 
Vi < n. {e , ei_i} h e^, 

just as in Proposition ^. 21 In addition, we define L(E) 
and — >e exactly as in Observation 14.31 but reading 
Con for fCon and h for h s . Again, we write 5(E) for 
(E, 5(E)), and C+(E) for (E, L(E), — > E ). 

Here we will show that up to reachable equivalence 
and even transition equivalence (cf. Definition \2A\f 
these event structures are exactly the ones in our sense 
which are rooted, singular, with finite causes and with 
finite conflict; and the stable event structures of [34] 
are the ones which are moreover locally conjunctive. 

For E = (Ew, Conw, \~w) an event structure as in 
[34] , let the event structure 5(E) := (Ew,\~) be given 
bv 

{either Y = {e}, Conw({e}) and X \~w e 
or \Y\ ^ 1, X = and Con w {Y) 
or Y is infinite and X = 0. 

Now, for X C fin E w , 

fCon(X) <=> Con w (X)AVeeX. 3YCE W . Y \- w e (1) 

and whenever fCon(X) we have 

X \- s Con w ({e}) AX \- w e. (2) 

Proposition 4.3 Let E be an event structure as in 
[34] , Then 5(E) is rooted, singular and with finite 
causes and finite conflict. If E is stable then 5(E) is 
locally conjunctive. Moreover, 5(5(E)) = 5(E) and 
C+(5(E)) =C+(E). 

Proof: Let E = (Ew, Conw ^w) be an event struc- 
ture as in [34] . As Conw is nonempty and subset- 
closed we have G Con W - Thus h , i.e., 5(E) is 
rooted. By construction, 5(E) is singular and with fi- 
nite causes and finite conflict. That the stability of 
E implies the local conjunctivity of 5(E) follows be- 
cause fCon(X) Conw(X) and every collection of 
finite sets has a finite subcollection with the same in- 
tersection. With Proposition ^. 21 and Observation ^. 3[ 
respectively, using ([1]) and {2}, one easily checks that 
5(5(E)) = 5(E) and C+(5(E)) = C+(E). □ 

For E = (E, h) a rooted event structure, the structure 
W(E) := (E,fCon,\~ s ), where fCon and h s are given 
by Definition 14. 1[ is clearly an event structure in the 
sense of [34] . 

Proposition 4.4 Let E be a rooted, singular event 
structure with finite causes and finite conflict. Then 
5(W(E)) = 5(E) and C+(W(E)) = C+(E). Moreover, 
W(E) is stable if E is locally conjunctive. 

Proof: Trivial, with Proposition 14.21 and Observa- 
tion [43] □ 
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4.4 The event structures of Winskel |35| 
These are defined as triples E = (E, h) where 

• E is a set of events, 

• #C£xEisa symmetric, irrcflcxive conflict 
relation. Write Con for the set of finite, conflict- 
free subsets of E, i.e., those finite subsets X C E 
for which 

Ve,e'GX -n(e#e / ), 

• and h C Con x _B is the enabling relation, which 
satisfies IheMCFe Con ^Yhe. 

Such an event structure is stable if it satisfies 

IheAFheA Con{X U Y U {e}) X n Y h e. 

The family 5(E) of configurations of such an event 
structure (written !F(E) in [35]) consists of those X C 
which are 

• conflict-free: Ve, e' G X. -i(e#e'), 

• and secured: Ve G X. 3eo, . . . , e n G X. e n = e A 
V« < n. {e , ...,e,_i} h e i; 

just as in Observation 14.71 Note that a set of events 
X is conflict-free iff every finite subset of X is in Con. 
In addition, we define L(E) and — >e exactly as in 
Observation 14. 4i reading Con for fCon and h for h s . 

Say that an event structure (E, Con, h) in the sense 
of [34j has binary conflict if for any X Cyj n _E: 

Con(X) ^ VY C X. (|Y| = 2 => Con(F)). 

Clearly, the event structures of [33J are just a reformu- 
lation of the event structures of [31] that have binary 
conflict. A small variation of the arguments from the 
previous section shows that, up to reachable equiva- 
lence and even transition equivalence, the event struc- 
tures of [35] are exactly the ones in our sense which 
are rooted, singular, with finite causes and with bi- 
nary conflict; and the stable event structures of [35] 
are the ones which are moreover locally conjunctive: 

For E = (E W , #w> ^~w) an event structure as in [33] . 
let the event structure £ (E) := (E w ,\-) be given by 

(either Y — {e} and X h^ e 
or \Y\ = {d,e}, d^e, X = and -n(d# w e) 
or Y = X = 
or \Y\ > 2 and X = 0. 

Write Con w (X) for \X\ < oo A Ve, e' G X. -n(e# w e'). 
Then equations and ([2]) of Section 14.31 hold again. 

Proposition 4.5 Let E be an event structure as in 
[55] , Then £(E) is rooted, singular and with finite 
causes and binary conflict. If E is stable then £(E) is 
locally conjunctive. Moreover, 5(£(E)) = 5(E) and 
C+(£(E)) = C+(E). 



Proof: Let E = (E\y, #w> l~w) be an event structure 
as in [35]. By construction, £(E) is rooted, singu- 
lar and with finite causes and binary conflict. That 
the stability of E implies the local conjunctivity of 
£(E) follows exactly as in the proof of Proposition ^. 31 
With Observations 14.71 and 14.41 respectively, one ob- 
tains 5(£(E)) = 5(E) and C+(£(E)) = C+(E). □ 

For E = (E, h) a rooted event structure with binary 
conflict, the structure W # (E) := (£, #,hf), where # 
is given by Definition O and X h# e iff 

{fCon(X) V \X\ = 1) A 3Y C X F h {e}, 

is clearly an event structure in the sense of [35] . 

Proposition 4.6 Let E be a rooted, singular event 
structure with finite causes and binary conflict. Then 
5(W#(E)) = 5(E) and C+(W#(E)) = C+(E). More- 
over, W^(E) is stable if E is locally conjunctive. 

Proof: The first two statements are trivial, with Ob- 
servations 14.71 and 14.41 Now assume E is locally con- 
junctive; we show that W # (E) is stable. So assume 
X h# e, Y hf e and for d, / G X U Y U {e} it holds 
that ~^(d#f). The latter means that either d = f or 
Con({d, /}). We have to show that X n Y hf e. 

Claim: Con(X U Y U {e}). 

proof: Let TY C X U Y U {e}. We have to find a Z 
with Z \- W. In case TY = or \W\ > 2 we can take 
Z = 0, because E is rooted and with binary conflict. 

In case W = {d, /} with dj^f, we have Con({d, /}). 

In case W = {e}, we use X hf e to infer that there 
is an X' C X with X' h {e}. 

In case W — {d} with d^e, then Con({d, e}) and 
hence Con({d}). 

Application of the Claim: Since X hf e, there is 
an X' C X with X' h e. Likewise, there is an Y' CY 
with Y' h e. Now Con(X' U Y' U {e}), so the local 
conjunctivity of E yields X' n Y' h {e}. Furthermore, 
X and Y must be finite, by definition of hf , so the 
claim also yields fCon{X n Y). As X' n Y' C X n Y 
we obtain X n Y hf e. □ 

4.5 The prime event structures of |34j 

These are defined as triples E = (E, Con, <) where 

• E is a set of events, 

• Con C J'fi n (E) is a nonempty consistency predi- 
cate such that: Y C X G Con =^> Y G Con, and 
{e} G Con for all e G E, 

• and < C E x _B is a partial order, the causality 
relation, satisfying 
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- d < e G X G Con 4lU{(i}e Con 

— and J. e = {d G 15 | rf < e} is finite for all e G £7. 

The set -L(E) of configurations of such an event struc- 
ture consists of those X C E which are 

• consistent: every finite subset of X is in Con, 

• and left-closed: Vd, e G E. d < e e X => d e X, 

just as in Observation Ej3 Write £(E) for (E,L(E)). 

Here we will show that up to /^-equivalence these 
event structures are exactly the ones in our sense which 
are rooted, singular, (manifestly) conjunctive, (pure,) 
5-irredundant and with finite causes and finite con- 
flict. On this class of event structures, Corollary [11] 
says that S coincides with £. Thus each of S and L 
can be understood as generalisation of the notion of 
configuration for prime event structures from [34 . 

For E = (Ew, Conw, <w) a prime event structure 
as in [M], let the event structure £(E) := (Ew,^~) be 

glV6nby (Y = {e} andl = {d\d< w e} 

X h Y iff I or |F| ^ 1, X = and Con w (Y) 
I or Y is infinite and X = 0. 



Now fCon — Conw and < = < 
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Proposition 4.7 Let E be a prime event structure as 
in [34] . Then £ (E) is rooted, singular, manifestly con- 
junctive, pure, 5-irredundant and with finite causes 
and finite conflict. Moreover, £(£(E)) = £(E) = <S(E). 

Proof: Let E = (Ew, Conw,<w) be a prime event 
structure as in [34] , As Conw is nonempty and 
subset-closed we have 6 Conw- Thus h 0, i.e., 
£ (E) is rooted. By construction, 8(E) is singular, 
manifestly conjunctive, pure, and with finite causes 
and finite conflict. By Observation 14.81 £(E) is S- 
irredundant, and Observation 14.51 and Corollary fTTI 
yield £(£(E)) = £(E) = 5(E). □ 

For E = (E, h) a rooted, iS-irredundant event structure 
with finite causes, the structure W'(E) :=(E, Con' , <), 
where Con'(X) iSfCon({deE \3eeX. d< e}), and 
fCon and < are given by Definition 14.11 is a prime 
event structure in the sense of 34J. In particular, by 
iS-irredundancy, for any eeE there is an n G IN such 
that there is no chain e n -<•••-< ei -< e. As E has 
finite causes, for any e G E there are only finitely many 
d G E with d ~< e; thus the set |e is finite. As [e must 
be part of any configuration containing e, fCon{[e), 
and hence {e} G Con for any eGE. As 5-irredundancy 
implies cycle- freeness, < must be a partial order. 

Proposition 4.8 Let E be a rooted, singular, con- 
junctive, 5-irredundant event structure with finite 
causes and finite conflict. Then £(W'(E)) = £(E) = 
5(E). 



Proof: Trivial, with Obs.RT5land Corollary [TT1 □ 

4.6 The event structures of |25j 

These are triples E = {E, <, jf) where 

• E is a set of events, 

• < C Ex E is a partial order, the causality relation, 

• jj= C E x E is an irreflexive, symmetric relation, 
the conflict relation, satisfying 

Vd,e,feE.d<eAd#f^e#f, 

the principle of conflict heredity. 

The set L(E) of configurations of such an event struc- 
ture consists of those X C E which are 

• conflict-free: # n (X x X) = 0, 

• and left-closed: Vd, e £ E. d<e£l4(!el, 

just as in Observation 14.51 In addition, we define 
i?/(E) as the set of finite configurations in L(E). 

The prime event structures of [35j are defined like- 
wise, but additionally requiring 

{d G E | d < e} is finite for all e E E, 

the principle of finite causes. 

Here we will show that up to £-equivalence these 
event structures are exactly the ones in our sense which 
are (pure,) rooted, singular, (manifestly) conjunctive, 
£-irredundant, cycle- free and with binary conflict, and 
for the ones from [35 also 5-irredundant and with fi- 
nite causes. 

For E = (En, <at, #at) a prime event structure as in 
PS] , let the event structure £(E) := (£jv,h) be given 
by 

(Y = {e} and X = {d\d < N e} 
X h Y iff I or Y = {d,e}, d^e, A = and -^{djf N e) 
I or \Y\ ^ 1,2 and X = 0. 



Now < = < N and # = # 
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Proposition 4.9 Let E be an event structure as in 
[25] . Then £ (E) is pure, rooted, singular, manifestly 
conjunctive, £-irredundant, cycle- free and with binary 
conflict. If E satisfies the principle of finite causes then 
£ (E) is moreover 5-irredundant and with finite causes. 
Furthermore, £(£ (E)) = £(E). 

Proof: Let E = (Ejy, <n, #at) be an event structure 
as in [25] ■ By construction, £ (E) is pure, rooted, sin- 
gular, manifestly conjunctive and with binary conflict. 
The relation -< coincides with <, so £ (E) is cycle-free. 
With Observation £(£(E)) = £(E), and by Ob- 
servation SJl 4, lZf(£(E)) = K f (E). 
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For every e G Ejy, the set J. e := {d G Sat | d < e} 
must be conflict-free, using the principle of conflict 
heredity and the irreflexivity of #. Hence, eGj.ee 
L(E) = L(S(E)). Therefore £{E) is £-irredundant. In 
case E satisfies the principle of finite causes, £ (E) has 
finite causes, and e £ |e e -R/(E) = i?/(£(E)) C 
S(£(E)). In this case £ (E) is even iS-irredundant. □ 

For E = (E, h) an £-irredundant, cycle-free event 
structure, the structure Watp(E) := (E, <, #/,), where 
d#he iff 3d' < d. 3e' < e. d'#e', and < and # are given 
by Definition 14.11 is clearly an event structure in the 
sense of [2S]- In particular, < is a partial order since 
E is cycle-free, and #h is irreflexive since if e^^e then 
e could not occur in any configuration, contradicting 
£-irredundancy. In case E is moreover 5-irrcdundant 
and with finite causes, then, by the argument in the 
previous section, the sets J, e have to be finite. In this 
case WVp(E) is a prime event structure as in [35j . 

Proposition 4.10 Let E be a rooted, singular, con- 
junctive, £-irredundant and cycle-free event structure 
with binary conflict. Then £(Wjvp(E)) = £(E). 

Proof: Trivial, with Observation 14.51 □ 

If E is moreover 5-irredundant, then S(E) = £(E), by 
Corollary [TTJ This does not extend to the structures 
corresponding to the event structures of [25] however: 

Example 15 Let E be given by E — {eo,ei,...} U 
{eoo}, # = and a < e 3 iff i < j. Then E G L(E) but 

4.7 Summary and remarks 

The left-closed configurations of an event structure 
generalise the left-closed and conflict-free subsets of 
events considered in Nielsen, Plotkin & Winskel 
[25], as well as the families of configurations of prime 
event structures as considered in Winskel [MJ 155] , 
The secured configurations generalise the families of 
configurations of event structures (prime and other- 
wise) considered in [M] [35] . The families of configu- 
rations of such event structures are completely deter- 
mined by their finite reachable configurations. 

As indicated in Table [lj for each of the seven classes 
of event structures proposed in [551 GUI a corre- 
sponding subclass of our event structures has been de- 
fined, together with event and configuration preserv- 
ing translations in both directions. Upon defining left- 
closed configurations and a transition relation on the 
event structures of [35J [MJ [35] , these translations even 
preserve transition equivalence. 



For the event structures in our sense corresponding 
to the prime event structures of [MJ [35] , the require- 
ments of 5-irredundancy and having finite causes can 
be replaced by the requirement of IZf-irredundancy: 
any event should occur in a finite reachable configura- 
tion. 

Preserving finitary equivalence — that is, preserving 
events and finite configurations — any event structure 
can be converted into one with finite causes and finite 
conflict, namely by adding all enablings h Y with 
Y infinite, and omitting the enablings Ihf with X 
infinite. This procedure preserves the other properties 
of Definition 14.21 except S- and £-irredundancy. It 
also preserves 7?./-irredundancy. Hence, up to finitary 
equivalence the first 6 correspondences of Table [T] hold 
without finite causes and finite conflict, and using IZf- 
irredundancy instead of 5-irredundancy. 

Any event structure E = (E, h) can be converted 
into an 5-irredundant structure, namely by omitting 
from E all events that do not occur in any secured con- 
figuration, and omitting from h any enablings X h Y 
in which such events occur in X or i 7 . This clearly pre- 
serves <5'(E), as well as the properties rootedness, sin- 
gularity, (local) conjunctivity, cycle-freeness and hav- 
ing finite causes and finite or binary conflict. Thus, up 
to having the same secured configurations, the prime 
event structures of [MJ (resp. [3S]) even correspond to 
the class of our event structures that are rooted, singu- 
lar, conjunctive and with finite causes and finite (resp. 
binary) conflict, i.e., not requiring 5-irredundancy. 
However, it should be noted that this correspondence 
does not hold up to 5-equivalence, as the set of events 
is not preserved. The same can be said for £ and IZf- 
irredundancy. 

5 Comparing Models 

Having seen the general correspondences between our 
various models of computation — event structures, con- 
figuration structures, prepositional theories and Petri 
nets — we now trace the relationships for various natu- 
ral subclasses; we are guided in our choice of these sub- 
classes by the concepts isolated in our exploration of 
previous notions of event structure in the last section. 

In Sections 15.11 15.31 and 15.41 we first of all give 
properties of configuration structures corresponding to 
those of event structures. We then tackle the con- 
verse completeness problem for collections of proper- 
ties: given a configuration structure with a collection 
of these properties, is there an event structure satisfy- 
ing the corresponding properties which yields the given 
configuration structure? Following our general point 
of view, we understand the configuration structures to 
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Event 
structures 


Configuration 
structures 


Propositional 
theories 


rooted 
singular 
conjunctive 
locally conj. 
finite conflict 
binary conflict 


rooted 

closed under (J 
closed under f] t 
closed under p| # 
finite conflict 
binary conflict 


(>0, any) 
(1, any), (any 0) 
(any < 1) 
(any, ddc) 
(finite, any) 
(<2, any) 


sing. & fin. con. 
sing. & bin. con. 
loc. conj. & f.c. 
loc. conj. & b.c. 


— / 

closed under (J 

2 

closed under (J 
— / 

closed under p| # 
closed under \ \ 


(1, any), (fin., 0) 
(1, any), (<2, 0) 
(finite, fddc) 
(<2, bddc) 



Table 2: Corresponding properties 



provide our (semantic) model of behaviour. So we are 
content to consider the map from event structures to 
configuration structures for each of the various classes, 
and show that it is onto; we do not seek such proper- 
ties of a map or maps in the converse direction. As 
map from event structures to configuration structures 
we take £ in Section 15.11 S in Section 15.31 (but only 
covering secure event structures) and !F o C and IZf in 
Section 15741 

In Section 15.21 we provide corresponding classes of 
propositional theories, described according to the syn- 
tactic form of the allowed formulae. Finally, in Sec- 
tion [575] we tie in corresponding classes of Petri nets. 



5.1 Event vs. configuration structures 

Table[5]gives the various corresponding properties. We 
|have already defined all those we need for event struc- 
tures. For configuration structures we first need some 
notions of consistency. 

Definition 5.1 Let C = (E,C) be a configuration 
structure. A set of events A C E is consistent, written 
Cn(X), if 3zeC. X C z. 

Further, X is finitely consistent, written Cnfi n (X), if 

VYC fin X. Cn(Y) 

and pairwise consistent, written Cn 2 (X), if 

VYCX. (\Y\<2 => Cn{Y)). 

Now we can define the corresponding properties used 
in the table. 

Definition 5.2 Let C = (E, C) be a configuration 
structure. Then: 



1. C is said to be consistently complete |27j or closed 
under bounded unions ((J) if 

A C C A Cn(\J A) => (J A e C 

2. C is said to be closed under nonempty intersec- 
tions (H.) if 

+ A C C => p| A e C 

3. C is said to be closed under bounded nonempty 
intersections ([")») if 

^iCCA Cn({J A) =► p| A g C 

4. C has finite conflict if 

[VFC X. (Y finite 3z E C. YC z C X)\ => Xe C 

5. C has binary conflict if 

[VycA. (|y| < 2 => 3zeC. YCzCX)} => XeC 

6. C is said to be closed under finitely consistent 
unions (|J ) if 

ACCACn fin (\jA)^\jAeC 

7. C is said to be closed under pairwise consistent 

2 

unions ([J ) if 

A C CA Cn 2 ({jA) =!> \JA e C 

8. C is said to be closed under finitely consistent 
nonempty intersections (f] m ) if 

O^CCA Cn fin (\jA) P A e C 

9. C is said to be closed under pairwise consistent 

— 2 

nonempty intersections (P|.) if 

^ A CCA CVi 2 ([J A) ^f]AeC. 

By their definition, these notions are related as follows: 
U -closed => IJ^-closed => IJ-closed 

binary conflict => finite conflict 

(J - and p| # -closed (J^- and p|.-closed 

-2 ^ -/ ^ 

P|. -closed =>■ pl.-closed => p| # -closed p|. -closed. 
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We can illustrate these properties with the aid of pre- 
viously given examples. The configuration structure 
G from Example [5] has all properties of Definition 15.21 
and indeed its event structure representation has all 
the corresponding properties of Table [5] 

The configuration structure of Example [5] fails to 
be closed under bounded unions, for there is no con- 
figuration {a} U {&}, even though its superset {a, b, c} 
is a configuration. Indeed, the corresponding event 
structure is not singular. 

The configuration structure of Example [S] fails to 
be closed under bounded nonempty intersections, for 
there is no configuration {c}. Indeed its associated 
event structure is not locally conjunctive. The modi- 
fied event structure of Example [6] is locally conjunc- 
tive, although not conjunctive. Its associated config- 
uration structure is closed under bounded nonempty 
intersections, but not under (general) nonempty inter- 
sections. 

The configuration structure of Example [Tl] fails to 
have finite conflict, whereas the event structure from 
Example [1] has finite conflict but fails to have binary 
conflict. 

By combining these examples it is not hard to show 
that for each selection from the first five properties, 
respecting the implications above, there exists a con- 
figuration structure with the selected properties and 
none of the others. 

The first three conditions above are particularly 
natural as they are (essentially) couched in terms of 
the lattice-theoretic structure the configuration struc- 
ture inherits from that of the powerset lattice of all 
events. The following are natural replacements of this 
kind for the remaining six conditions. 

Definition 5.3 Let C = (E, C) be a configuration 
structure. 

4'. C is said to be closed under directed unions (U-j.) 
if for every nonempty family A of configurations: 

[Vx, y G A. 3zeA. x U y C z] =>■ (J A e C 

5'. C is said to be weakly coherent iff for every family 
ACCof configurations: 

[Vx,yeA. 3zeC. xUyCz C [jA] [JA £ C 
6'. C is said to be finitely complete 34J or closed un- 

fc 

der finitely compatible unions (1J ) if 

A C C A VF C fin A. Cn({jF)^\jAeC 



7'. C is said to be coherent [37J 13S] or closed under 

2 c 

pairwise compatible unions (1J ) if 

A C C AVx,y£A. Cn(xUy) =>- [J A e C 

8'. C is said to be closed under finitely compatible 
nonempty intersections (P|^ ) if 

^ACCAVFC^A Cn(\jF) => f]A e C 
9'. C is said to be closed under pairwise compatible 

—2c 

nonempty intersections ([). ) if 

®^ ACC AVx,yeA. Cn(x U y) ^ f]A e C. 

In all six cases the property of Definition [53] is strictly 
weaker than the corresponding one of Definition 15. 2[ 
except that (weak) coherence also implies rootedness. 
Strictness is illustrated by the configuration structure 
consisting of and the co-singleton sets of natural 
numbers. However, in all six cases (trivially in the last 
two) the two properties coincide for those configura- 
tion structures closed under non-empty intersections. 

Proposition 5.1 Let C = (E,C) be a configuration 
structure that is closed under |~) # . Then 

• C is closed under IJ^ iff it has finite conflict, 

• C is weakly coherent iff it is rooted and has binary 
conflict, 

• C is closed under (J iff it is closed under (J , and 

— 2 

• C is coherent iff it is rooted and closed under 1J . 

Proof: We only prove the first and last statement; the 
other proofs are similar. 

Suppose C has finite conflict. Let ^ A C C satisfy 

Va;, y£A. 3zeA. x U y C z. 

Then every finite subset Y of 1J A is contained in the 
union of a finite subset of A and hence in an element 
of A. As C has finite conflict it follows that \JAeC. 

Now suppose C is closed under and f] a . Let X 
be a set of events satisfying 

VYCX. (Y&mte => 3zeC. YCzCX). 

As C is closed under |~),, for every finite subset Y 
of X there is a least configuration zy e C satisfying 
Y C zy C X. Clearly zy U zy> C zy u yi. Hence 
X = Uyc fin x z y G C. 

2 

Suppose C is rooted and closed under 1J . Let A 
satisfy 

A C C A Vx.yeA. Cn(xUy). 
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Then Cn(Y) for each YC{JA with \Y \ < 2, so {J A e C. 

2 c 

Now suppose C is closed under (J and f] t . Taking 
A = in Definition [531 7 we find that C is rooted. Let 

A CC A Cn 2 ({jA). 

As C is closed under f] t , for every eeiei there 
is a least configuration z e eC satisfying e G z e C a;. 
Moreover, for every d,e £{J A there is a least Zd, e G C 
satisfying d, e G z<ie- Clearly U z e C Zd e . Hence 

lU = lU e ^e€C. □ 

Proposition 5.2 A configuration structure is closed 
under (J C iff it is closed under (J and [L. Likewise, it 
is coherent iff it is closed under (J and weakly coherent. 

Proof: For both claims "only if" is straightforward. 
So suppose C = (E, C) is closed under \J and \J^. Let 

ACCAVF C fin A. Cn(\J F). 

As C is closed under (J we have VF C^„ A. (J F G C. 
Thus the family consisting of (J F G C for F G^„ A is 
a directed union, and U J 4 = U_Fc^ 1 yiU^ le C- 

The last claim follows because in the presence of 
closure under (J, both coherence and weak coherence 
simplify to: 

Acc AVx,yeA. xUy eC ^{JAeC. □ 

We will now proceed to establish the correspondence 
between the properties of event structures in the first 
column of Table and the properties of configuration 
structures in the second column. 

Theorem 4 Let E be an event structure. 

1. If E is singular, then £(E) is closed under (J. 

2. If E is conjunctive, then £(E) is closed under |"| # . 

3. If E is locally conjunctive, then £(E) is closed 
under f] m . 

4. If E has finite conflict, then so does £(E). 

5. If E has binary conflict, then so does £(E). 

6. If E is singular and with finite conflict, then £(E) 

— / 

is closed under (J . 

7. If E is singular and with binary conflict, then £(E) 

— 2 

is closed under (J . 

8. If E is locally conjunctive and with finite conflict, 
then £(E) is closed under f] t . 



9. If E is locally conjunctive and with binary conflict, 

— 2 

then £(E) is closed under 

Proof: The details are routine and are omitted. □ 

In the next theorem we will show that none of the 
nine properties of configuration structures that figure 
in Theorem [4] can be strengthened. 

Something unexpected arises in the last four state- 
ments of Theorem^ the conjunction of two properties 
of an event structure gives rise to a property of configu- 
ration structures which does not follow from the prop- 
erties associated to the two event structure properties 
separately. The following example illustrates this. 

Example 16 Consider the configuration structure 
C = (F, C) where 

F := {di | i > 1} U {b, c} U {d % | i > 1} 
and where C contains the sets: 

0, {a t | i > 1} U {&}, {a t | i > 1} U {c} 

and, for all n > 1, 

{ai, . . . , a n , d n , b, c}. 

Then C is rooted and closed under (J and p| # , and has 
finite and binary conflict. But it is not closed under 

either (J or (J or f]^or f] t . 

We would therefore not, for example, expect to recog- 
nise a configuration structure closed under (J and with 
finite conflict as the configuration structure of a sin- 
gular event structure with finite conflict. For that we 
should also require the configuration structure to be 
closed under . 

So it is natural to define a notion of package of 
properties of configuration structures with the inten- 
tion that packages are the collections of properties for 
which corresponding event structures are expected to 
exist. We call a set of properties from the second col- 
umn of Table a package if 

— / 

— it contains the property "closed under (J " iff it 
contains the properties "closed under (J" and "hav- 
ing finite conflict" , 

— 2 

— it contains the property "closed under (J " iff it 
contains the properties "closed under (J" and "hav- 
ing binary conflict" , 

— it contains the property "closed under P)." iff it 
contains the properties "closed under f] a " and 
"having finite conflict" , and 

2 

— it contains the property "closed under p| # " iff it 
contains the properties "closed under and 
"having binary conflict." 
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By Propositions 15.11 and 15.21 the phenomenon of 
Example [16] does not apply to event structures closed 
under f] a . When restricting attention to those, pack- 
aging would not be needed. 

Theorem 5 A configuration structure C has any 
package of properties from the second column of Ta- 
ble [2] iff there is a (pure) event structure E with the 
corresponding properties such that £(E) = C. 

Proof: Let C = (E, C) be a configuration structure. 
Define E := (E,\-) bylhY iff Any = 0AAUYGC. 
Thus E = £ (C). It is straightforward to check that 

— E is always pure, 

— if C is rooted, then so is E, 

— if C is closed under |~) # then E is conjunctive, 

— and if C is |"| # -closed then E is locally conjunctive. 

We show that £(E) = C. Suppose x G C. For any 

Y C x take Z := x — Y. Then Z C x and Z h Y. So 
x G L(E). Conversely, suppose x G L(E). Then there 
is a Z C x such that Z h i. (In fact, Z must be 0.) 
By construction, x = ZUi£C. 

Next let C have finite conflict. Let E := (E,\-U h") 
with h defined as before, and X h" Y" iff X = and 
y infinite. It is straightforward to check that 

— E is always pure and with finite conflict, 

— if C is rooted, then so is E, 

— if C is closed under |~) # then E is conjunctive, 

— and if C is p|^-closed then E is locally conjunctive. 
We show that £(E) = C. That C C L(E) goes exactly 
as in the previous case, so suppose x G L(E). For any 
finite Y C x there must be a Z C a; with Z \- Y . By 
construction, ZUFgC. AsrcZUfCi, and C 
has finite conflict, we have x G C. 

The case that C has binary conflict goes similarly. 
Now assume C is closed under bounded unions ((J). 
Let E := (E, hi U h 2 ) with 

X hi Y iff \Y\ = 1, X n Y = and X U Y G C, 
X h 2 Y iff X = 0, |Y| ^ 1 and Cn(Y). 

It is straightforward to check that 

— E is always pure and singular, 

— if C is rooted, then so is E, 

— if C is closed under |"|. then E is conjunctive, 

— and if C is p| # -closed then E is locally conjunctive. 
We show that £(E) = C. Suppose x G C. For any 

Y C x take Z := x-Y if \Y\ = 1 and Z := otherwise. 
Then Z C x and Z h Y. So x G L(E). Conversely, 
suppose x G L(E). Then there is a Z C x such that 
Z h x. In case |x| = 1 we have x = Z U x G C. In case 
|x| ^ 1 it must be that Z = and Cn(x). Moreover, 



for any e G x there is a Z e C x such that Z e h {e}. By 
construction, Z e U{e} G C. As U ee;r (Z e U{e}) = x and 
Cn(x), and C is closed under bounded unions, x G C. 

— 2 

Next assume C is closed under (J . 
Let E := (E, h x U h 2 U h 3 > with 

X hi Y iff \Y\ = 1, X n Y = and X U Y G C, 
X h 2 Y iff X = 0, (|Y| = or |Y| = 2) and Cn(Y), 
X h 3 Y iff X = and |Y| > 2. 

It is straightforward to check that 

— E is always pure, singular and with binary conflict, 

— if C is rooted, then so is E, 

— if C is closed under f] t then E is conjunctive, 

— and if C is Q^-closed then E is locally conjunctive. 
We show that £(E) = C. That C C L(E) goes exactly 
as in the previous case, so suppose x G L(E). In case 
|x| = 1 there again is a Z C x such that Zhi, and 
we have x = Z U x G C. So suppose |x| 7^ 1. For 
every Y C x with |Y| = or |Y| = 2 there is a Z with 
2 h y. It must be that Z = and Cn(Y). Hence 
Cn2(ic)' Moreover, for any e G x there is a Z e C x 
such that Z e h {e}. By construction, Z e U {e} G C. 
As \J eex (Z e U {e}) = x and Cn 2 (x), and C is closed 
under pairwise consistent unions, x G C. 

The case that C is closed under (J goes likewise. □ 

A noteworthy consequence of this theorem is that ev- 
ery event structure with a given collection of properties 
from the first column of Table [2] is ^-equivalent to a 
pure one with the same set of properties. 

The property £-irredundancy of event structures is 
defined in terms of associated configuration structures: 
call a configuration structure irredundant if every event 
occurs in a configuration, then an event structure E 
is £-irredundant iff £(E) is irredundant. Thus The- 
orems 2] and [5] can be trivially upgraded by adding 
£-irredundancy and irredundancy to the table. 

Likewise, call a configuration structure S -irredun- 
dant if every event occurs in a secured configuration. 
Using that 5(E) C 5(£(E)), even for impure event 
structures E, whenever E is an 5-irredundant event 
structure then £(E) is an 5-irredundant configuration 
structure. Conversely, if C is an 5-irredundant con- 
figuration structure, then any pure event structure E 
with £(E) = C is 5-irredundant. Thus Theorems H] 
and [5] can be upgraded by adding 5-irrcdundancy to 
the first two columns of the table. 

Cycle- freeness, as defined in SectionlH is a meaning- 
ful concept only for singular conjunctive £-irredundant 
event structures; there it matches the concept of 
coincidence-freeness on configuration structures. 



29 



Definition 5.4 A configuration structure is coinci- 
dence-free if for every two distinct events occurring in 
a configuration there is a subconfiguration containing 
one but not the other. 

Proposition 5.3 A singular, conjunctive, £-irredun- 
dant event structure E = {E, C) is cycle-free iff £(E) is 
coincidence-free . 

Proof: For all e in E, the set J. (e) := {d e E \ d < e} 
is the least left-closed configuration of E containing e. 
This implies that a failure of coincidence-freeness in 
C(E) occurs if and only if there are two distinct events 
d and e with d < e < d, i.e., in case of a cycle in E. □ 

We can now characterise the configuration structures 
associated to the event structures of [25] . 

Corollary 12 A configuration structure arises as the 
family of configurations of an event structure of [25j 
iff it is rooted, irredundant, coincidence-free and 

2 

closed under (J and f] t , or, equivalently, irredundant, 
coincidence-free, coherent and closed under f] a . □ 

Although [25 contains a characterisation of the do- 
mains induced by families of configurations of event 
structures of |25j , ordered by inclusion, a characterisa- 
tion as above seems not to have appeared before. 

The (secured) configuration structures that arise 
as the families of configurations of the various event 
structure of Winskel [34l [35] will be characterised in 
Section 15.31 We do not have a characterisation of the 
left-closed configuration structures associated to event 
structures with finite causes, and consequently no 
characterisation of the left-closed configuration struc- 
tures associated to the general and stable event event 
structures of [2H [35] . 

5.2 Propositional theories 

We now consider a variety of forms of formulae, writ- 
ten as (L, R) where L is taken from the lattice on the 
left of Figure 2] and R is taken from the lattice on the 
right. Other than the case where R is "bddc" these 
formulae are always implications, and then they are 
always clauses except when R is "ddc" or "fddc". If 
they are clauses then L and R indicate in an evident 
way how many variables there are on each side of the 
implication; for example the form (any, < 1) indicates 
a clause X =>■ Y such that Y has at most one element 
and with no restriction on X. In the left-hand lattice, 
"nef" stands for "finite and non-empty" . 

Formulae of the form (i,ddc) are implications 
where the hypothesis is a conjunction of variables 
whose size is specified by L and whose conclusion 



any 

finite > 

< 2^ ^nef^ 

\ / 

1 or 2 



any 
ddc 
fddc 
bddc 
< 1 




Figure 4: Form Lattices 

is a formula in "ddc" form, a disjoint disjunction of 
clauses, viz. a formula Vie J A ^i where the Yj are sets 
of variables, and we write V^ for (V $) A /\{->(ip Aip') | 
<p, ip' G if ^ tp'}, the disjoint disjunction of <I>. 

Sometimes such inconsistencies are signalled by Uni- 
tary or even binary means. Formulae of the form 
(L, fddc) are again implications where the hypothesis 
is a conjunction of variables whose size is specified by 
L but now the conclusion is a formula in "fddc" form, 
a finitely disjoint disjunction of clauses, viz. 

(VA^ A A -(A%^ A A^) 



j,keJ, j^k 



where the Yj are sets of variables and the Zj^ are finite 
subsets of Yj . Finally we say that a formula has the 
(L, bddc) form if it has the form 



(A* 



V A V - : ' A -(^fcAe fej ) 



where A is a set of variables with size specified by L, 
the Yj are sets of variables and the ej^k are in Yj. 

Formulae of any of the above forms are called pure 
if no variable occurs at both sides of the implication. 

Theorem 6 Let T be a propositional theory all of 
whose formulae have one of the forms given in a row of 
Table [2j Then M{T) has the corresponding property, 
as given in the table. 

Proof: We consider only the cases (any, ddc) and 
(finite, fddc), leaving the others to the reader. To 
this end we first of all show that the collection of 
models of a family <i> of implications of the form 
/\ X Vie J A ^j' 18 closed under bounded non-empty 
intersections. Suppose that {nii i G /} is a set of 
models of $, with upper bound m! . Let m be the in- 
tersection of the m;; we must show it is a model. To 
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this end, choose one implication f\X => Vje./ A m 
$ and suppose that to includes its premise X. Then, 
for i £ /, so does and hence there is a unique 
in J such that C m,. We claim that, for i 6 J, 
all are the same. For otherwise ml would con- 
tain X U Yj ■ U Yfc for j, fc e J, j ^ fe, contradicting the 
fact that m' satisfies /\X =^^/j eJ /\Yj. Hence there 
is a unique j in J such that Yj C mi for all i £ J. 
So Yj C m, and this must be the unique j with this 
property as m C to', since / is non-empty. 

We deal with the case (finite, fddc) by showing that 
the set of models of a family 4> of formulae of the form 

A a > (Vjgj A ^) a A iifc6J , -(A a A ^j), 

with X finite and the Zj± finite subsets of Yj, is 
closed under finitely consistent non-empty intersec- 
tions. Suppose that {m, i £ 1} is a set of models 
of <i>, with union ml and intersection m, such that 
Cnfi n {ml). We must show that m is a model. To 
this end, choose one implication X (VjejA^jf) A 
Aj,keJ, j^k "'(A A A in * and suppose that 
m includes its premise X. Then, for i £ I, so does 
and hence there is a unique in J such that 
TO i- We claim that, for i £ I, all are the 
same. For otherwise ml would contain the finite set 
X U Z jik U Z k ,j for j, k £ J, j ^ k. As Cn fin (m') this 
set would be included in a model of $, which is a con- 
tradiction. Hence there is a unique j in J such that 
Yj C mi for all i £ I. So K, C m, and this must be 
the unique j with this property as m C to', since / is 
non-empty. □ 

For the converse direction we go from event structures 
to propositional theories. Given any event structure 
E satisfying a collection of properties of Table [2] we 
seek to axiomatise its associated configuration struc- 
ture £(E) by formulae whose form is one of the combi- 
nations of the forms found on the corresponding lines 
of the table. In combining forms (i G /) into 

a form (L,R) we obtain L and R as the meets in the 
form lattices given in Figure 3] For example, for sin- 
gular conjunctive event structures the axiomatisation 
will be by formulae of one of the two forms (1, <1) and 
(any,0). 

Theorem 7 Let E be a (pure) event structure satisfy- 
ing any collection of properties of Tabled] Then £(E) 
can be axiomatised by (pure) formulae whose forms 
are one of the combinations of the forms found on the 
corresponding lines of the table. 

Proof: We first consider collections of properties not 
involving (local) conjunctivity. By Proposition ll.il for 
any event structure E, £(E) can be axiomatised by the 



set of formulae 

<p x :=(/\X^ \/ f\Y) 

YhX 

for X C E; expanding out ipx to conjunctive normal 
form yields a set of clauses $x, and {J X ce ^ x ax ~ 
iomatises £(E). 

If E is rooted, i.e., h 0, then is a tautology and 
$0 is empty. Hence all clauses in {J X ce have the 
form (>0, any). 

If E is singular, whenever YhX then either Y is 
empty or X is a singleton. If \X\ = 1 then $x is a 
set of formulae of the form (1, any). If \X\ ^ 1, there 
either is a relation Y h X or not: if there is then (fx 
is a tautology and <!>x is empty, and if not we obtain 
the single clause (X, 0). 

If E has finite conflict then for any infinite X, ipx is 
a tautology and $x empty. For finite X, $x consists 
of clauses of the form (finite, any). The case of binary 
conflict is similar. 

We now turn to collections of properties including 
(local) conjunctivity. Note that conjunctivity implies 
local conjunctivity. Let E be a locally conjunctive 
event structure. One easily sees that if Y h X and 
ConiY U X) then there is a least Z C Y such that 
Z \- X and, further, if Z and W are two minimal sets 
with Z V- X and W h X, then either Z = W or else it 
is not true that Con{Z Ul¥L)X). If we now keep only 
those pairs YhX such that Con(Y U X), and such 
that Y is a minimal set with Y h X, then we obtain 
an event structure E' = (E, h') with the same collec- 
tion of configurations as E and such that if Z h' X 
and W h' X then either Z = W or else it is not true 
that Con'(Z U W U X). Further if E was pure, rooted, 
singular, conjunctive, or with finite or binary conflict 
then so is E'. 

First consider the case that conjunctivity is among 
the considered properties of E. Exactly as above we 
find that £(E') is axiomatised by the set of formulae 
ip' x : = Vyhx A y ) for x ^ E : and by its 

conjunctive normal form IJxc_e ^'x- ^ s ^' i s conjunc- 
tive, for each set of events X there is at most one set Y 
with Y h' X. If such a Y exists, $ x consists of the for- 
mulae (X, {e}) for e £ Y; otherwise it consists of the 
single clause (X, 0). Thus all formulae have the form 
(any, < 1). The arguments for the other properties of 
E are exactly as before. 

We proceed with collections of properties including 
local connectivity, but excluding connectivity. We see 
again that £(E') is axiomatised by the set of formulae 
(p' x := (A X =>■ Wh'x A Y) for X C E. But since it 
is false that Con '(Z U W U X) when Z h' X, W h' X 
and Z ^ W, no configuration can include Z U W U X. 
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Hence the set of formulae 



•Px 



Yh'X 



for X C E axiomatises C(E'), and thus £(E), as y>x 
implies (fx and holds in all interpretations in £(E'). 
These formulae have the form (any, ddc). 

If E, and hence E', is rooted then ip$ is a tautology 
and can be omitted. All remaining formulae have the 
form (>0, ddc). 

Suppose next that E, and hence E', is both locally 
conjunctive and singular. Then, much as above, for 
nonsingular X, ipx is either a tautology or equivalent 
to a formula of the form (any, 0), and for singular X 
it has the form (1, ddc). 

Suppose now that E' is both locally conjunctive and 
with finite conflict. Then for infinite X, ipx is a tau- 
tology. For finite X we know that if Z h' X, W h' X 
and Z ^ W then it is not true that Con (Z U W U X). 
So as E' has finite conflict, it follows that there are fi- 
nite subsets Z\ and W\ of, respectively, Z and W such 
that for no Y is it the case that Y h' Z 1 U W\ U X. 
It follows that Z\ U W% U X is a subset of no configu- 
ration. Since this works for any such Z and W there 
is a (finite, fddc) formula that implies ipx and that 
holds in all interpretations in -C(E'), and so we have 
the required axiomatisation. 

The case where E' is locally conjunctive, singular 
and with finite conflict is an easy combination of the 
previous two cases. When E' is rooted, h' and so 
we need only then consider ipx for nonempty X. 

Suppose now that E' is both locally conjunctive and 
with binary conflict. Then for X with \X\ > 2, ipx is 
a tautology. For X with \X\ < 2 we know that if 
Z H X, W H X and Z ^ W then it is not true that 
Con '{Z U W U X). So as E' has binary conflict, and 
Con(Zl)X) and Con'(WUX), it follows that there are 
elements e and e' of, respectively, Z and W such that 
for no Y is it the case that Y h' {e, e'}. It follows that 
{e, e'} is a subset of no configuration. Since this works 
for any such Z and W there is a (< 2, bddc) formula 
that implies ipx and that holds in all interpretations 
in jC(E'), and so we have the required axiomatisation. 

The cases where E' is locally conjunctive and has 
binary conflict, and is one or both of singular or rooted 
are dealt with as before. 

Finally we remark that, in the above, in all cases 
the axiomatisation obtained is pure if E' is. □ 

An immediate consequence of the above work (Theo- 
rems |H [5] and [7J and Proposition 15. ip is that a config- 
uration structure is axiomatisable by formulae of the 



form (finite, < 1) iff it is closed under nonempty in- 
tersections and directed unions; this result is essen- 
tially due to Larsen and Winskel [S3] as axiomatisa- 
tions of the form (finite, < 1) correspond to Scott infor- 
mation systems. There are two related cases of logical 
interest: Horn clauses where there are finitely many 
antecedents and one consequent, and Scott clauses 
where, more generally, there may be finitely many con- 
sequents [71 152"]. 

Proposition 5.4 A configuration structure (E, C) is 
Horn clause axiomatisable iff it is closed under arbi- 
trary intersections and directed unions. It is Scott 
clause axiomatisable iff C is closed in the product 
topology on 2 E . 

Proof: For the implication from left to right in the 
first statement, we have just established closure under 
directed unions and non-empty intersections. Closure 
under the empty intersection is immediate, as E is a 
model of any set of Horn clauses. For the converse, we 
have an axiomatisation by clauses of the form X Y 
where X is finite and Y is empty or a singleton. But 
the first case cannot obtain, as here E is a model. 

For the second statement, the product topology on 
2 E is the -E-fold power of the discrete topology on the 
two-point set. Identifying 2 E with V(E), we see that 
the space has as basis all sets of the form 

Ux,y = {m C E | x C to, (to n y) = 0} 

where x,y are finite subsets of E. The statement now 
follows, noting that the complement of M x ,y is the set 
of models of x =>- y. □ 

5.3 Secured configuration structures 



In Section 15711 we characterised the left-closed configu- 
ration structures associated to various classes of event 
structures. Here we do the same for the secured con- 
figuration structures of isecurcl event structures. Our 
results are indicated in Table [3J 

Unlike in Theorem [4] it is not always the case that 
the secured configuration structure associated to a se- 
cure event structure with finite (resp. binary) conflict 
has finite (resp. binary) conflict. 

Example 17 Let E = (E, h) be given by 

E:={ai,bi i G IN} U {c}, 

{di} h {&;}, {b,} h {a 4+ i}, {bi} h {c,a,i} (i E IN) and 
h X for any X C E unequal to {<2i+i}, {bi} or {c, ai} 
(i e IN). Then 



{a t , bi\i < n} 
R f (E) = { {a,, b t \ i<n}\J {a n } 
{a t , b t | i < n} U {c} 



n e IN 
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Event 
structures 


Configuration 
structures 


rooted 
singular 
conjunctive 
locally conjunctive 
finite conflict 
binary conflict 


rooted 

closed under (J 
closed under f] m 
closed under (~) # 
hyperreachable finite conflict 
hyperreachable binary conflict 


singular & fin. con. 
singular & bin. con. 
loc. conj. & fin. con. 
loc. conj. & bin. con. 


— / 

closed under (J 

— 2 

closed under (J 
— / 

closed under p|, 

-=-2 

closed under [) 



Table 3: Corresponding properties, secured case 



S(E) = R f (E)U{{a i ,b i \ie¥!}} 

and 

L(E) = 5(E) U {E}. 

The configuration E is not secured because once c hap- 
pens only finitely many of the a% and bi 's can have hap- 
pened, and no further ai and bi's can happen, because 
such an aj needs to be preceded by bi and vice versa. 
Nevertheless, each finite subset of E is contained in a 
secured configuration. It follows that <S(E) does not 
have finite (or binary) conflict, even though E does 
have finite (even binary) conflict. 

The event structure of Example [IT] is pure, secure, 
rooted and conjunctive. By Theorem [5]6 below there 
can be no such example with a singular event struc- 
ture. Example [17] shows in fact that the requirement 
of being hyperconnected, which by Corollary [8] holds 
for configuration structures of the form 5(E) with E 
secure, can prevent the presence of configurations re- 
quired by Definition 15.21 4. Hence it is appropriate to 
weaken the requirement of Definition 15.21 4. 

Definition 5.5 Let C = (E, C) be a configuration 
structure. Its closure under finite conflict, := 
{E, C^), is the configuration structure with the same 
set of events, and as configurations those sets X satis- 
fying 

VF C X. (Y finite => 3zeC. Y C z C X). 

Likewise, its closure under binary conflict, C := 
(E, C b ), has as configurations those sets X satisfying 

VF C X. (\Y\ < 2 => 3zeC. Y C z C X). 

One always has C C C' C C b (in the first inclusion 
take z to be X). Note that C has finite conflict iff C = 



C-^ and C has binary conflict iff C = C b . Hence the 
following appear to be suitable replacements of these 
notions for hyperconnected configuration structures. 

Definition 5.6 A configuration structure C = (E, C) 
has hyperreachable finite conflict if C = S(C'). It has 
hyperreachable binary conflict if C = S(C b ). 

In other words, a configuration structure C = (E, C) 
has hyperreachable finite (resp. binary) conflict iff X G 
C exactly when X can be written as 1J°^ such that 
X Q = and, for all i G IN, X t C X i+1 and for all X 
with Xi C X C Xi + i one has 

WCX.Y finite (resp. |Y | < 2) => 3z E C. Y C z C X. 

We proceed to show that a configuration structure has 
hyperreachable finite (resp. binary) conflict iff it has 
the form 5(C) for C a configuration structure with 
finite (resp. binary) conflict. 

Lemma 2 Let C be a configuration structure. Then 
(Cf)f = Qf and (C b ) b = C b . 

Proof: Suppose X is a set of events satisfying 

\/Y CX.Y finite ^3zeC f .YCzCX 

and let Y C X be finite. Then there is a z G 
with y C z C X. Hence there is a u> G C with 
Y Cw C z C X. Thus X G C f . 

That (C^) 6 = C b follows likewise. □ 

Corollary 13 Let C be a configuration structure. 
Then C-^ has finite conflict and C b binary conflict. □ 

Proposition 5.5 A configuration structure has hy- 
perreachable finite conflict iff it has the form 5(C) for 
C a configuration structure with finite conflict. 

Likewise, a configuration structure has hyperreach- 
able binary conflict iff it has the form 5(C) for C a 
configuration structure with binary conflict. 

Proof: "Only if" follows immediately from Defini- 
tion [5J3 and Corollary [13] For "if" suppose that C = 
(E,C) has finite conflict, i.e., C = . By Theorem[5] 
there is a pure event structure with finite conflict such 
that C = £(E). So 5(C) = 5(£(E)) = 5(E) C L(E) = 
C by Proposition 13.121 and Lemma [T] Hence C is 572.- 
secure, and Proposition 13.41 yields 5(5(C)) = 5(C). 
Using the monotonicity w.r.t. the inclusion ordering 
of the operators (•)* and 5 we find 

S((S(C)) f ) C 5(C / ) = 5(C) = 5(5(C)) C 5((5(C)) / )- 

Thus 5(C) = 5((5(C)K), i-e., 5(C) has hyperreach- 
able finite conflict, which had to be shown. 

The second statement is obtained likewise, reading 
"binary" for "finite" and b for /. □ 
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We are now ready to prove the implications from the 
left to the right column of Table [3] 

Theorem 8 Let E be a secur^l event structure. 

0. If E is rooted, then so is 5(E). 

1. If E is singular, then 5(E) is closed under (J. 

2. If E is conjunctive, then 5(E) is closed under f] m . 

3. If E is locally conjunctive, then 5(E) is closed 
under f~) # . 

4. If E has finite conflict, then 5(E) has hyperreach- 
able finite conflict. 

5. If E has binary conflict, then 5(E) has hyper- 
reachable binary conflict. 

6. If E is singular and with finite conflict, then 5(E) 
is closed under (J . 

7. If E is singular and with binary conflict, then 5 (E) 

— 2 

is closed under (J . 

8. If E is locally conjunctive and with finite conflict, 
then 5(E) is closed under |~) # . 

9. If E is locally conjunctive and with binary conflict, 

2 

then 5(E) is closed under |~|.. 

Proof: Claim is immediate from Definition 13. 21 For 
claims 4 and 5, note that if E is reachably pure and 
with finite (or binary) conflict, then E, as constructed 
in the proof of Proposition 13 . 151 is pure and with fi- 
nite (or binary) conflict, and 5(E) = 5(E). Now the 
results are immediately from Theorem 0] and Propo- 
sitions 13.121 and 15.51 For the remaining claims, let 
A C 5(E). By "consistency" we will mean that 
Con([J A). This follows for Claims 1, 3, 6, 7, 8 and 9 
(but not 2) because 5(E) C L(E) and either Cn(\JA), 
or Cnfi n ({JA) and E has finite conflict, or Cri2(\JA) 
and E has binary conflict. Applying Definition ^. 51 for 
each x G A let x = U^o Xn Wl th xq = and 

Vn G N. x n C x n+ i AVFC x n+1 . 3Z C x n . ZVY. 

Ad 1, 6 and 7. Let X n := \J xeA x n for n G IN. Then 
X := \JA = U™ =0 X n . Moreover, X = and 
X n C X n+ i for n G N. Let e G X n+ i for some 
n G IN. Then e G x n +i for certain x G A. Thus 
3Z C x n C X n . Z h {e}. By consistency and 
singularity, h F for any Y C X with |y| ^ 1. 
Hence X G 5(E). 



6 In fact, for Claims 4 and 5 it suffices to assume that E is 
reachably pure, and for the other claims that 5(E) C L(E). 



Ad 2, 3, 8 and 9. Let A ^ and pick a y from A. Let 
X n = y n n D A for nG N. Then f|4 = U^o 
Moreover, Ao = and A„ C A„ + i for n G N. 
Now let y C X n+1 for some n G IN. Then Y C 
j/ n +i and y C x for xG A Hence there is a Z C y n 
with Z h F. Moreover, as E is secure, for x <E A 
we have x G L(E), so there must be a Z x C i 
with Z x h y. Now by the conjunctivity of E, or 
by consistency and the local conjunctivity of E, we 
obtain that Zr\f] xeA Z x h Y, with Zr\f] xeA Z x C 
X n . Hence X G 5(E). □ 

By Lemma [TJ the security requirement 5(E) C L(E) 
holds trivially in case E has finite conflict, i.e., in 
Claims 4-9 of Theorem [8] it is not needed for Claims 
and 1 and used in the proof of claims 2 and 3. The 
question whether this requirement is needed there is 
open. The following example shows that Claims 4 and 
5 fail for general event structures that are not reach- 
ably pure: 

Example 18 Let E := (N,h) be given {j} h {i,j} 
for i < j and h X when \X\ ^ 2. Then 5(E) = 
R f (E) = 7 fin (¥i) but 5((5(E))/) = £(E) = 3>(K). 
The infinite configurations are not secured, because 
events can happen only in decreasing order. Neverthe- 
less, each finite set of events is (contained in) a secured 
configuration. It follows that 5(E) does not have hy- 
perreachable finite (or binary) conflict, even though E 
does have finite (even binary) conflict. 

There does not appear to be an obvious way around 
this example, as the above event structure has the 
same secured configurations as one with X h Y iff 
X = and Y finite, which is a prototypical exam- 
ple of an otherwise trivial event structure with infinite 
conflict. Happily, our goal is to deal with secure event 
structures anyway, as those fit the computational in- 
terpretation of configuration structures. 

In order to establish the completeness of the char- 
acterisations of Table [3] we first show that some crucial 
properties of Dcfinition l5.2l are preserved under closure 
under finite or binary conflict. 

Lemma 3 Let C be a configuration structure. 
— / 

• If C is closed under (J then so is C^ . 

• If C is closed under |~) # then so is C^. 

• If C is closed under (J then so is C . 

2 

• If C is closed under p| # then so is C b . 

• If C is closed under then so are C^ and C fc . 

• If C is rooted then so are C^ and C h . 
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Proof: Let C = (E, C). Note that, for each X £ E, 

VYC fin X. 3z£C f . YQz&WQfinX. 3z£C. YCz, 

i.e., X is finitely consistent w.r.t. iff it is finitely 

consistent w.r.t. C — hence we can write Cn,fi n (X) 

without indicating whether it is w.r.t. C-^ or C. 

— / 

Suppose first that C is closed under (J . Let 
A C be a family of configurations of C-^ such 
that Cnfi n (\JA). We wish to show that (J A £ C f . 
Suppose that Y C^„ (J A. Then Y has the form 
(JiLi f° r some n > where 1^ Cy;„ Xi for some 
a;, S A for i = 1, n. So there are Zi £ C such that 
5"i C C Xi. We then have that Z := (J™=i z * — U ^- 
Since CVt/m(LM) we have Cnfi n (Z). As C is closed 
under (J it follows that 2gC. As we also have that 
Y C Z C (J A, it follows that (J A is a configuration 
of C^, as required. 

— / 

Suppose instead that C is closed under |~) # . Let ^ 

A C C* , such that CViyj„ ((J A) . We wish to show that 

f]Ae C f . Suppose that Y C fin f| A. Then Y C fin x 

for each x £ A and so there are z x £ C with V C z x C a:. 

Since Cnyj n (U a;gA a;) we have CVi/j„(U xey i Zx)- As C 
— / 

is closed under f] a it follows that z := HxeA z z e ^ '■ 
As moreover Y C z C I, it follows that |"| A is a 
configuration of C* , as required. 

The claims about binary conflict are proved just like 
the ones about finite conflict, and the claims about 
closure under |~). are obtained as simplifications of the 
arguments about f~| above. The claims about rooted- 
ness are trivial. □ 

Theorem 9 A hyperconnected configuration struc- 
ture C has any package of properties from the sec- 
ond column of Table [3] iff there is a (pure and) secure 
event structure E with the corresponding properties 
such that 5(E) = C. 

Proof: "If" follows from Theorem [8] and Corollary [3 
For "only if" , let C* := C b in case the package contains 
hyperreachable binary conflict; if that does not apply, 
C* :— in case the package contains hyperreachable 
finite conflict, and C* := C otherwise. Now S(C*) = C 
and, by Lemma [3] and Corollary [TBI C* has the same 
package of properties as C but dropping the adjective 
"hyperreachable" . Thus, using Theorem^ there exists 
a pure event structure E with the corresponding prop- 
erties such that £(E) = C*. Using Proposition 13.121 
5(E) = S(C(E)) = 5(C*) = C. By Proposition 
the event structure E is secure. □ 

Trivially, an event structure E is 5-irredundant iff the 
configuration structure 5(E) is irredundant; thus The- 
orems [8] and [9] can be upgraded by adding 5-irredun- 



dancy and irredundancy to Table [3] £-irredundan- 
cy and cycle-freeness are not particularly interesting 
properties when studying secured configurations. For 
the property finite causes we have correspondence re- 
sults only for singular event structures: 

Definition 5.7 A configuration structure is said to 
satisfy the axiom of finiteness 34, 35 if any configu- 
ration is the union of its finite subconfigurations. 

Proposition 5.6 If E is a singular event structure 
with finite causes, then 5(E) satisfies the axiom of 
finiteness (and is closed under (J). Conversely, if C is a 
hyperconnected configuration structure satisfying the 
axiom of finiteness and any package of properties from 
the second column of Table [3] including closure under 
1J, then there is a pure and secure event structure E 
with finite causes and the corresponding properties of 
Tabled such that 5(E) = C. 

Proof: The first claim has been established in the first 
statement of Proposition 14.21 of which direction "=>" 
only requires singularity and finite causes. 

For "conversely" , first of all note that if C satisfies 
the axiom of finiteness, then so do & and C & . Now 
note that in the proof of Theorem [5l which is called in 
the proof of Theorem[9j one may replace the definition 
of hi by 

X hi Y iff \Y\ = 1, X n Y = and X U Y £ F(C) 

because any K-event occurring in a configuration oc- 
curs in a finite subconfiguration and whenever X h Y 
all enablings X' h Y with X' D X may be dropped. 
By construction, the resulting event structure has fi- 
nite causes. □ 

For configuration structures satisfying the axiom of 

finiteness we can reformulate the condition of being 
i ° 

closed under |J . 

Proposition 5.7 Let C be a configuration structure 
satisfying the axiom of finiteness. Then C is closed 
under jj iff it is closed under |J^ C . 

Proof: "Only if" is trivial, so suppose C = (E, C) is 
— /c 

closed under (J . Let A C C with Cn fin ({JA). We 
have to show that (J A £ C. Let B be the set of all 
finite configurations included in members of A. Then 
for all F £fi n B we have that (J F £fi n (J A and hence 
CVi(U F). By the axiom of finiteness, \JA = \JB £ C. 

Moreover, for configuration structures satisfying the 
axiom of finiteness and closed under |J we reformulate 
the condition of being hyperconnected. 
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Proposition 5.8 Let C be a configuration structure 
closed under |J and satisfying the axiom of finiteness. 
Then C is hyperconnected iff it is coincidence-free. 

Proof: "Only if" is trivial, so suppose C = (E, C) is 
coincidence- free. Closure under Fj immediately im- 
plies that 5(C) C C, so it remains to be shows that 
C C S(C). Let x G C. For any e G x say that e can 
happen at stage n if n is the smallest cardinality of a 
subconfiguration of x containing e. By the axiom of 
finiteness, this cardinality is always finite. Let X n be 
the set of all events in x that can happen at stage < n. 
Then X = 0, X n C X n+1 for n G N and U£L = B. 
As X n is the union of all subconfigurations of x of size 
< n and C is closed under (J , we have A„ G C for n G IN. 
Let X n eye X n+ i for some n G IN. It suffices to 
show that Y G C. For any e G Y — A„ pick a sub- 
configuration 2/ e of x of n + 1 elements, containing e. 
Given that y e does not have a proper subconfigura- 
tion containing e, for any d e in y e , by coincidence- 
freeness, there must be subconfiguration Zd of y e with 
e? G Zd C y e — {e}, showing that <i G X re C y. It fol- 
lows that y e C Y". Hence y = J n U U e eY-x„ V e anc ^ 
as C is closed under (J we have y G C. □ 

We now apply the results of this section to characterise 
the secured configuration structures associated to the 
various event structures of WiNSKEL [3U [35] . 

Corollary 14 A configuration structure arises as the 
family of (secured) configurations of an event structure 
of [34] iff it satisfies the axioms of rootedness, finite- 
ness, coincidence-freeness and finite-completeness. 

A configuration structure arises as the family of (se- 
cured) configurations of a stable event structure of [33] 
iff it moreover is closed under Pi,. □ 

These characterisations were obtained earlier in [34 . 
However, the following one seems to be new. 

Corollary 15 A configuration structure arises as the 
family of configurations of a prime event structure of 
[34] iff it satisfies the axioms of rootedness, finite- 
ness, coincidence-freeness, finite-completeness, irre- 
dundancy and closure under p| # . □ 

Recall that for these structures the left-closed and se- 
cured configurations are the same. 

Corollary 16 A configuration structure arises as the 
family of (secured) configurations of an event structure 
of [35] iff it satisfies the axioms of rootedness, finite- 
ness, coincidence-freeness and closure under [j . 

A configuration structure arises as the family of (se- 
cured) configurations of a stable event structure of [35J 
iff it moreover is closed under ("| # . □ 



In [33] the characterisations above were claimed, but 
using coherence (cf. Definition [5T3J 7) instead of closure 
under (J . Arend Rensink [personal communication, 
around 1996] provided the following counterexample 
against that characterisation. 

Example 19 Let C = (E, C) be given by E := {a, 6, c} 
and 

C := {<b,{a},{b},{a,b},{a,c},{b,c}}. 

Then C satisfies the axioms of rootedness, finiteness, 
coincidence-freeness, closure under |~), and coherence, 
but it is not closed under (J (cf. Definition 15. 21 7). By 
Corollary \W\ it therefore cannot arise as the family of 
configurations of an event structure of [35j . 

— 2 

We now propose the property of closure under [j as 
the replacement for coherence in this theorem. Vising 
Proposition 15. II we can replace closure under (J (and 
rootedness) by coherence if we have closure under P| # . 
This gives the following, apparently novel, characteri- 
sation. 

Corollary 17 A configuration structure arises as the 
family of configurations of a prime event structure of 
[35] iff it satisfies the axioms of finiteness, coincidence- 
freeness, coherence, irredundancy and closure under 

n.- □ 

Propositional theories 

We do not have axiomatic characterisations of prop- 
erties like connectedness or hyperconnectedness, and 
therefore we cannot offer a third column for Table [3] 
such that for C a hyperconnected configuration struc- 
ture satisfying a package of properties, a suitably ax- 
iomatised T theory can be found for which M(T) = C. 
As best we could work up to reachable equivalence, and 
be content with a theory T such that S(M(T)) = C. 
In this context we directly inherit the third column of 
Table [5] — however, only for theories that are secure, a 
property for which we have no axiomatic characterisa- 
tion. 

Definition 5.8 A configuration structure C = (E, C) 
is secure if 5(C) C C, and a propositional theory T is 
secure if M(T) is. 

Note that if C is secure, then so is any pure event 
structure E with £(E) = C. 

Corollary 18 A hyperconnected configuration struc- 
ture C has any package of properties from the second 
column of Table [3] iff there is a secure propositional 
theory T whose formulae are of one of the combina- 
tions of the forms found on the corresponding lines of 
Tabled such that S(M(T)) = C. 
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Proof: Given a hyperconnected configuration struc- 
ture C satisfying a package of properties from the sec- 
ond column of Table [3J Theorem [9] yields a pure and 
secure event structure with the corresponding proper- 
ties such that 5(E) = C. By Theorem [71 there is a 
theory T whose formulae are of one of the combina- 
tions of the forms found on the corresponding lines of 
Tabled such that M(T) = £(E). As E is secure, so 
is £(E) and hence T. Using Proposition 13 . 1 21 we find 
S(M(T)) = S(C(E)) = 5(E) = C. 

Conversely, given a package of properties from the 
second column of Table [3j let T be a secure theory 
whose formulae are of one of the combinations of the 
forms found on the corresponding lines of Table [21 
Then Theorem[6]yields that A4(T) has the correspond- 
ing package of properties from the second column of 
Tabled) (i.e., skipping "hyperreachable" ) , so by Theo- 
rem [5] there is a pure event structure E with the cor- 
responding properties such that /3(E) = M.(T). As 
noted above, E is secure, and by Theorem [H] 5(E) 
has the given package of properties. Furthermore, 
5(E) = 5(£(E)) =S(M(T)). □ 

In case of a package of properties including finite con- 
flict, or excluding (local) conjunctivity, the require- 
ment that T be secure may be dropped. This follows 
from the remarks following Theorem [51 

We do not have an axiomatic characterisation of 
irredundancy, nor of the axiom of finitcness, and hence 
neither of the event structures from [3H [35] . 

Reachable configuration structures 

We were unable to find correspondences of the form 
of Table [3] using reachable configurations instead of 
secured ones. The problem we encountered is that 
the set of reachable configurations of a singular event 
structure need not be closed under bounded unions. 

Example 20 Let E = (E, h) be given by E:=N U {e}, 
{n} h {n + 1} and {e} h {n + 1} for n e N and H X 
for X not of the form {n + 1}. This event structure is 
rooted and singular and has finite conflict. Its reach- 
able configurations include {0 . . . , n} for all numbers 
n, together with all sets containing e. In particular the 
set of all events is a reachable configuration, because 
after e all other events can happen in one step. How- 
ever, IN is not a reachable configuration. Therefore, 
7Z(E) fails to be closed under bounded intersections. 

5.4 Two finitary comparisons 

In this section we characterise the configuration struc- 
tures that arise by taking the finite left-closed config- 
urations of the various classes of event structures. We 



also characterise the corresponding propositional theo- 
ries, but working up to finitary equivalence only. Thus, 
given a finitary configuration structure C satisfying 
some relevant closure properties, we seek a proposition 
theory T of a particular form such that ^(^(T)) = C; 
we do not seek a theory T with A4(T) = C. Subse- 
quently, we do the same for the finite reachable con- 
figurations of the various classes of event structures. 

We can put any event structure E into a "finitary" 
form E/ by removing all causal relations Y h X with X 
or Y infinite and then adding all h X for X infinite. 
Clearly E/ has finite causes and finite conflict, and 
T{L{E. } )) = F(C(E))- Thus, by TheoremEJ any fini- 
tary configuration structures arises as !F(C(E)) for an 
event structure E with finite causes and finite conflict. 
Next, since every clause of the form Y =>■ X with Y in- 
finite is satisfied by any finite configuration, up to fini- 
tary equivalence any configuration structure has an ax- 
iomatisation by formulae of the form (fin, any). Thus, 
at the level of finitary equivalence, we have a general 
correspondence between (pure) event structures (with 
finite causes and finite conflict), finitary configuration 
structures and this class of propositional theories. 

For particular correspondences we again consider 
the relevant properties of event structures and their 
correspondences in configuration structures and prop- 
ositional theories. We consider pureness, rootedness, 
singularity, conjunctivity, local conjunctivity and bi- 
nary conflict, as finite conflict is already built in. For 
finitary configuration structures, the distinctions be- 
tween |J and |J , and between f] t and f] t , disappear, 
and indeed we are left with closure conditions, U/, 
fl, Uj and fl , meaning, respectively: closure under 
finite bounded unions, binary intersections, bounded 
binary intersections, finite pairwise consistent unions 
and pairwise consistent binary intersections. 

Observation 5.1 A finitary configuration structure 

— is closed under |J iff it is closed under D/; 

— is closed under f] m iff it is closed under D; 

— is closed under f] t iff it is closed under H; 

— is closed under |J iff it is closed under ; 

— is closed under f] m iff it is closed under n 2 . 

Note that a configuration structure is closed under 0/ 
iff it is closed under U and is either rooted or empty. 
We say that a configuration structure C has finite bi- 
nary conflict iff for every finite set of events X 

[VFCX (\Y\ <2 3zeC. YCzCX)} =*> XeC. 

Note that a finitary configuration structure C has finite 
binary conflict iff C = J-(G b ) with C b its closure under 
binary conflict, as introduced in Definition 15.51 
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Observation 5.2 If a configuration structure C is 
closed under [J, f) # , 1J or f] m , then so is ^"(C). 
Furthermore, if C has binary conflict then ^(C) has 
finite binary conflict. 

For propositional theories used for comparison up to 
unitary equivalence we replace "ddc" and "bddc" by 
new forms "ddfc" and "bddfc" , meaning finite con- 
junctions. The interpretation of the resulting forms 
(L, R) should be clear; as before, they are combined 
by taking meets in the left and right lattices. We get 
the correspondences summarised by Table 2J 



Event 
structures 


Configuration 
structures 


Propositional 
theories 


rooted 
singular 
conjunctive 
locally conj. 
binary conflict 


rooted 

closed under 0/ 
closed under D 
closed under n 
fin. bin. conflict 


(nef, any) 
(1, any), (fin., 0) 
(fin., <1) 
(fin., ddfc) 
(<2, any) 


sing. & bin. con. 
loc. conj. & b.c. 


closed under U ^ 
closed under FT 


(1, any), (<2, 0) 
(<2, bddfc) 



Table 4: Corresponding properties for finite parts 



We define a package of properties of configuration 
structures from the table analogously to before. We 
call a set of properties from the second column of Ta- 
ble H] a package if 

— it contains the property "closed under Uy" iff it 
contains the properties "closed under D/" and 
"having finite binary conflict" , and 

— it contains the property "closed under n iff it 
contains the properties "closed under fY and "hav- 
ing finite binary conflict." 

We can now formulate the correspondences explicitly 
as: 

Theorem 10 

1. Let E be a (pure) event structure satisfying any 
collection of properties from Table |U Then there 
is a (pure) propositional theory T whose axioms 
have forms which are combinations of the forms 
corresponding to the event structure properties, 
such that T{M{T)) = T(C{E)). 

2. Let T be a propositional theory whose axioms 
have forms which are combinations of forms from 
a given collection of rows of Table |H Then 
J-(M.(T)) has the corresponding collection of 
properties of configuration structures. 



3. Let C be a finitary configuration structure satis- 
fying a given package of properties from Table [4] 
Then there is a pure event structure E with finite 
causes and finite conflict such that !F(£(E)) = C 
and with the corresponding collection of proper- 
ties of event structures. 

Proof: 

1. Given a (pure) event structure E satisfying a 
given collection of properties of the table, Theo- 
rem[7]yields an axiomatisation of C(E) by a (pure) 
propositional theory T whose axioms have the 
form of a combination of the forms correspond- 
ing to the properties given by Table [2j 

Now we can remove any formulae of the form 
(X, — ) with X infinite from the axiomatisation as 
they are automatically true in finite interpreta- 
tions (i.e., the finite subsets of E). (Alternatively, 
we could have obtained these forms by requiring 
E, without limitation of generality, to be with fi- 
nite conflict.) Next, to any formula of the form 
(— , ddc) one can associate a formula of the form 
(— , ddfc) by removing all infinite disjuncts, and 
the associated formula is true in a finite interpre- 
tation iff the original one is; the same holds for 
(— , bddc) and (—, bddfc) formulae. Making these 
replacements as necessary, one arrives at the re- 
quired (pure) propositional theory 

2. Given any propositional theory T whose axioms 
have the form of combinations of forms given in 
rows of the table, then, by Thcorem[6j Ai(T) sat- 
isfies the corresponding properties of Table and 
so, by Observations IQ1 and I5TTI T(M(T)) satis- 
fies the corresponding properties of Table |4j 

3. Let C be a finitary configuration structure with a 
given package of properties of the table, not in- 
cluding finite binary conflict. Then, by Observa- 
tional] C satisfies the corresponding package of 
properties of Table [21 and so, by Theorem O there 
is a pure event structure E satisfying the corre- 
sponding properties for event structures such that 
£(E) = C. Now E/ also satisfies these properties, 
and .F(£(E/)) = J="(£(E)) = T(C) = C. 

In the case of a package of properties which does 
include finite binary conflict, by Lemma [3] and 
Corollary Q21 C fc has the same package of prop- 
erties but with binary conflict instead of finite 
binary conflict. Thus, by Theorem there is 
a pure event structure E with the correspond- 
ing properties such that £(E) = C fc . Now E/ 
is pure and also satisfies these properties, and 
F(C(E f )) = T{C(E)) = T{C b ) = C. □ 
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Comparisons via finite reachable parts 

We now turn to comparisons via finite reachable parts. 
A similar obstacle as in Section 15.31 presents itself: 
an event structure E may have binary conflict even 
though 72./ (E) does not have finite binary conflict. 

Example 21 Let C be the configuration structure 
with events {ao, . . . , 04} and with configurations: 

0, {at}, {di, a l+ i}, {di, a i+ i, a i+2 } 

and 

{a , . . . ,a 4 } 

where the counting is done mod 5. Then C is finitary 
and has (finite) binary conflict, but its reachable part 
has not, as {ao, . . . , 04} is not reachable. Furthermore, 
C can be given by a pure rooted event structure with 
finite causes and binary conflict, namely the one with 
the enablings 

h flj, h Oi, and a l+1 h ai,a i+2 

again counting mod 5 (and omitting explicit set paren- 
theses), plus those needed for rootedness and binary 
conflict. 

Since our primary interest is in characterising natural 
properties of event structures we find a suitable weak- 
ening of this property of configuration structures, and 
proceed analogously to Section |5~3"1 

Definition 5.9 A configuration structure C has finite 
reachable binary conflict iff C = lZ(J-{C h )). 

In other words, a configuration structure C = (E,C) 
has finite reachable binary conflict iff X € C exactly 
when X can be written as {ei, . . . , e„} so that for every 
j < n and Y C {ei, . . . , ej} with \Y\ < 2 there is a 
configuration zeC such that FCzC {ei, . . . , e 3 }. 

We then obtain the correspondences summarised by 
Tabled 



Event 
structures 


Configuration 
structures 


Propositional 
theories 


rooted 
singular 
conjunctive 
locally conj. 
binary conflict 


rooted 

closed under 0/ 
closed under n 
closed under n 
fin. reach, b.c. 


(nef, any) 
(1, any), (fin., 0) 
(fin., <1) 
(fin., ddfc) 
(<2, any) 


sing. & bin. con. 
loc. conj. & b.c. 


2 

closed under LU 
closed under n 


(1, any), (<2, 0) 
(<2, bddfc) 



Table 5 : Corresponding properties for finite reachable 
parts 



Lemma 4 Let E be a pure event structure with the 
properties given in one of the rows of Table 03 Then 
1Z f (E) has the corresponding property, as given in the 
table. 

Proof: The event structure Ef has the same proper- 
ties as E and in addition has finite conflict. Clearly 
Hf(E) = 1Zf(Ef), and by Proposition 13.111 we have 
Kf(E f ) = T{S{E f )). By Lemma Q] S (E/) C L(E f ). 
Hence, by Theorem H3 <S(E/) has the correspond- 
ing property given in Table [3] In case the row we 
started with was not that of binary conflict, by Obser- 
vations E21 and EH] J 7 (S(Ef)) has the corresponding 
property of Table 03 In case the row we started with 
was that of binary conflict, by expanding Definition l5.6l 
we find that S(E f ) = «S(«S(E/) 6 ). Now observe that 
J-(C b ) — J-(J-(C) b ) for any configuration structure C. 
Applying Propositions 13.111 and 13.21 this yields 

^(5(E/)) = T(S(S(E f ) b )) 

= J r (1Z(S(Ef) b )) 

= 1Z(J r (S(Ef) b )) 

= H(J r (J r (S(Ef)) b )) . 

Hence 1Zf(E) = J r (S(Ef)) has finite reachable binary 
conflict. □ 

Note that the purity requirement in Lemma U can be 
weakened to reachable purity, and is only needed for 
the binary conflict row, namely in the application of 
Theorem [HI The following example shows that this 
requirement cannot be omitted. 

Example 22 Let E = (E, h) be the event structure 
with E := {01,02,03} and the enablings h X when 
\X\ 7^ 2, as well as 

di h 0^, aj+i 

where the counting is done mod 3. Then E has bi- 
nary conflict, £(E) = ?(E) and 1lf(E) = 7(E) - {E}. 
Hence 72./ (E) does not have finite reachable binary 
conflict. 

We can now establish the correspondences of Ta- 
ble 03 We define packages of properties of configura- 
tion structures from the table just as we did for finitary 
equivalence, substituting finite reachable binary con- 
flict for finite binary conflict; and we keep the same 
form lattices and their interpretation as just used for 
finitary equivalence. 

Theorem 11 

1. Let E be a (pure) event structure satisfying any 
collection of properties from Table 03 Then there 
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is a (pure) propositional theory T whose axioms 
have forms which are combinations of the forms 
corresponding to the event structure properties 
such that TZ(T(M(T))) = 7£(.F(£(E))). 

2. Let T be a propositional theory whose axioms 
have forms which are combinations of forms from 
a given collection of rows of Table [5] Then 
TZ(J-(M(T))) has the corresponding collection of 
properties of configuration structures. 

3. Let C be a finitary connected configuration struc- 
ture satisfying a given package of properties from 
Table O Then there is a pure event structure 
E with finite causes and finite conflict such that 
lZf(E) = C and with the corresponding collection 
of properties of event structures. 

Proof: 

1 . This is immediate from part 1 of Theorem 1101 

2. Let T be such a theory. It follows from Theo- 
rem[TU]that there is a pure event structure E satis- 
fying the corresponding properties from the table 
such that T(C(E)) = F(M(T)). The conclusion 
then follows from Lemma[4]and Proposition ^. 121 

3. This follows just as in the proof of Theorem [TOl 
Let C be a finitary connected configuration struc- 
ture with a given package of properties of the ta- 
ble, not including finite reachable binary conflict. 
Then, by Observation 15.11 C satisfies the corre- 
sponding package of properties of Table [2] and 
so, by Theorem [5J there is a pure event struc- 
ture E satisfying the corresponding properties for 
event structures such that /3(E) = C. Now Ej is 
pure and also satisfies these properties, so Propo- 
sition GUJ yields K f (E f ) = K(F(C(F, f ))) = 
11{F{C(E))) = K(F(C)) = C. 

In the case of a package of properties which 
does include finite reachable binary conflict, by 
Lemma [3] and Corollary [T3l G b has the same 
package of properties but with binary conflict in- 
stead of finite reachable binary conflict. Thus, 
by Theorem [5j there is a pure event structure 
E with the corresponding properties such that 
£(E) = C b . Now E/ also satisfies these properties, 
and K f (E f ) = 1Z(f(C(E f ))) = K(F(C(E))) = 
1l{f(C b )) = C. □ 

We now apply the results of this section to characterise 
the finitary configuration structures associated to the 
various event structures of Winskel [34l [35] . 



Corollary 19 A configuration structure arises as the 
family of finite left-closed configurations of an event 
structure of [33] iff it is finitary, rooted and closed 
under D. It arises as the family of finite left-closed 
configurations of a stable event structure of [34 iff it 
moreover is closed under n. 

A configuration structure arises as the family of fi- 
nite left-closed configurations of an event structure of 
[35] iff it is finitary, rooted and closed under U . It 
arises as the family of finite left-closed configurations 
of a stable event structure of [35] iff it moreover is 
closed under n. □ 

The four classes of configuration structures mentioned 
in the above corollary arise as the finite models of 
propositional theories whose axioms have the forms 

(1, any), (nef, 0) 
(1, ddfc), (nef, 0) 

(1, any), (2, 0) 
(1, bddfc), (2, 0), 

respectively. 

When dealing with finite reachable configurations, 
the same characterisations as in Corollary [19] are ob- 
tained, but now the resulting configuration structures 
are additionally connected. 

Proposition 5.9 Let C be a finitary configuration 
structure closed under |J. Then C is connected iff it is 
coincidence- free. 

Proof: Similar to the proof of Proposition 15.81 □ 

Corollary 20 A configuration structure arises as the 
family of finite reachable configurations of an event 
structure of [34j iff it is finitary, rooted, coincidence- 
free and closed under D. It arises as the family of finite 
reachable configurations of a stable event structure of 
[34] iff it moreover is closed under T). 

A configuration structure arises as the family of fi- 
nite reachable configurations of an event structure of 
[35] iff it is finitary rooted, coincidence-free and closed 
under U . It arises as the family of finite reachable 
configurations of a stable event structure of [35 iff it 
moreover is closed under n. □ 

The first class of configuration structures in this corol- 
lary was the class of configuration structures originally 
considered in [TT] . 

We have no characterisation of the finitary con- 
figuration structures associated to the event struc- 
tures from [25]; in particular, the property of C- 
irredundancy appears hard to express in terms of fi- 
nite configurations. As for the prime event structures 
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from [Ml [35] , recall that their finite left-closed config- 
urations are the same as their finite reachable or finite 
secured configurations. 

Corollary 21 A configuration structure arises as the 
family of finite configurations of a prime event struc- 
ture of [33] iff it is finitary, rooted, coincidence- free, 
irredundant and closed under D and n. 

A configuration structure arises as the family of fi- 
nite configurations of a prime event structure of [35J 
iff it is finitary, coherent, coincidence-free, irredundant 
and closed under n. □ 

The two classes of configuration structures mentioned 
above arise as the finite reachable models of preposi- 
tional theories whose axioms have the forms 

(1, 1), (nef, 0) 
(1, 1), (2, 0) 

respectively. We do not have axiomatic characteri- 
sations of connectedness or coincidence-freedom; that 
lack is circumvented in the above characterisations by 
talking about reachable models. 

5.5 Tying-in Petri nets 

The third columns of Tables [21 El El also provide charac- 
terisations of classes of Petri nets corresponding to var- 
ious combinations of properties of event structures or 
configuration structures. The pure 1-occurrence nets 
correspond up to finite configuration equivalence to 
event and configuration structures that are rooted and 
with finite conflict. We do not have a structural char- 
acterisation of the subclass of those pure 1-occurrence 
nets corresponding to locally conjunctive event struc- 
tures. However, for each combination of the properties 
singular, conjunctive, and binary conflict, the forms 
(I/, R) that characterise the associated prepositional 
theory also provide a structural characterisation of the 
associated subclass of pure 1-occurrence nets. Here L 
restricts the cardinality of the set of posttransitions 
of any given place, and R restricts the cardinality of 
its set of pretransitions; we say that the place has the 
form (L, R). For example, rooted singular pure event 
structures correspond to the pure 1-occurrence nets 
each of whose places have either no pretransitions or 
exactly one posttransition. The proof of the correspon- 
dences goes via the characterisations of the associated 
propositional theories. 

Theorem 12 Let T be a (pure) rooted propositional 
theory in conjunctive normal form, whose clauses are 
combinations of the forms found in lines 2, 3 and 5 
of Table [2] Then Af(T) is a (pure) 1-occurrence net 



whose places have the corresponding combinations of 
forms, as well as (nef, any). 

Similarly, if N is a (pure) 1-occurrence net whose 
places have combinations of the forms found in lines 
2, 3 and 5 of T able H then T(N), as defined [aFthe endl 
lof Section 1.4[ is a (pure) rooted propositional theory 
axiomatised by clauses obeying these forms, as well as 
(nef, any). 

Proof: The first statement follows immediately from 
the construction in Definition 11.171 For the second 
statement, recall that T(N) consists of the formulae 
l\ Y Vxe'r<.')-H>) S A X for s e S and Y C fin s*. 
When converting such formulae to conjunctive normal 
form, one obtains clauses Y => Z with Y C^„ s* for 
some place s. As remarked at the end of Section 1.4, 
one can omit any clauses for Y — 0, or more gener- 
ally for which •y(s)-/(s) < 0, as then 6 '^W-'Ws. 
Hence all clauses obey the restriction (nef, any) and 
T(N) is rooted. By construction, T(N) is pure when 
N is. If s has the form (1, any) or (<2, any), then 
so do the associated clauses. Furthermore, if s has 
no pretransitions, then the associated clauses have the 
form Y => 0, and if s has one pretransition t, then the 
associated clauses have the form Y => for Y Cfi n s' 
with m Y(s) - I(s) > f(s), and Y => t for Y C fin s* 
with 1 < m Y(s)-I(s) < f(s). Thus, if s has the 
form (any, 0) or (any, <1), then so do the associated 
clauses. □ 

This theorem also holds when using the third columns 
of Tables 2] or [5J (which are the same) instead of the 
one of Table [2j For these columns are obtained by ad- 
ditionally imposing the condition (finite, any), a con- 
dition that is implied by (nef, any). Furthermore, the 
theorem remains true if any place s with n incoming 
arcs and k initial tokens is deemed to additionally have 
the form u (<k + n, <n) or (k+n+1, 0)". Namely if 
Y Cfi n s' and \Y\ > k + n then the transitions in Y 
cannot all happen, so we obtain the clause /\Y => 0. 
Among such clauses one only needs to retain the ones 
with \Y\ minimal, that is, with \Y\ = k + n + 1. Fi- 
nally, places without posttransitions may be ignored. 
Thus, for example, pure 1-occurrence nets whose 
places either have < 1 posttransition, or one incoming 
arc and no initial tokens, or no incoming arcs and < 1 
initial token correspond to pure singular event struc- 
tures with binary conflict. 

This theorem, together with Theorem[3jand Propo- 
sition [LJl yields a bijection up to finitary equivalence 
between the stated subclasses of pure rooted propo- 
sitional theories and the corresponding subclasses of 
pure 1-occurrence nets. As the nets are pure, these bi- 
jections also hold up to finitary reachable equivalence. 
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6 Related Work 

The notion of a configuration structure as a model of 
concurrency in its own right stems from Winskel [33 ; 
our configuration structures are obtained by dropping 
the requirements imposed in [33]: coherence, stability, 
coincidence-freeness and the axiom of finiteness. The 
term configuration structures stems from their 
configuration structures obeyed the requirements of 
finitariness, rootedness, coincidence-freeness and clo- 
sure under U, that together ensured that these struc- 
tures were exactly the families of finite configurations 
of Winskel's event structures [34]. Two further partial 
generalisations of this model were previously proposed 
by Pinna & Poigne [55] and Hoogers, Kleijn & 
Thiagarajan [20]. The event automata of [26] are 
rooted finitary configuration structures together with 
a transition relation between the configurations; each 
transition extends a configuration with exactly one 
event. The local event structures of [20] are rooted, 
finitary, connected configuration structures together 
with a step transition relation — > between the con- 
figurations that satisfies 

• X ^ X, 

• X — > Y implies X C Y, and 

• X~~>ZandXCYCZ implies X -> Y -> Z. 

In [ID] X -> Y is denoted X h (Y - X), so that their 
notation X h Y implies XnF = l and translates to 

Our configuration structures are, up to isomor- 
phism, the extensional Chu spaces of Gupta & Pratt 
[18] W7\ [29] . It was in their work that the idea arose 
of using the full generality of such structures in mod- 
elling concurrency. Also the propositional representa- 
tion of configuration structures stems from [TSl [29] . It 
should be noted however that the computational in- 
terpretation in [TSj, [17l [29] differs somewhat from that 
in [34l HU ESI [20] and the current work. In particu- 
lar, in [TSl EH] unreachable configurations may be 
semantically relevant, as witnessed by the notions of 
causality and internal choice in [18], [29] and that of 
history preserving bisimulation in [17] . 

Gunawardena proposes causal automata in [16] 
and geometric automata in [15] . The first are given by 
a set of events with, for each event e, a boolean expres- 
sion p(e) over the set of events. Each event occurrence 
in p(e) is interpreted as the proposition that it hap- 
pened, and e is enabled when p(e) evaluates to true. 
In geometric automata, a more complicated infinitary 
logic is used, and the boolean expression is replaced 
by two positive logical expressions, one of which must 
evaluate to true, and the other to false, in order for the 



associated event to be enabled. Both models can be in- 
terpreted in a natural way in terms of event automata; 
plain configuration structures are not sufficient here. 

Our event structures are directly inspired by, and 
generalise, the ones of Winskel [25l [34] [35] . Many 
other variants of these event structures have been pro- 
posed in the literature. 

A bundle event structure, as studied in Langerak 
[22], is given as a tuple (E, i— >, I) with E a set of 
events, =ff an irreflexive, symmetric conflict relation, 
i— » C 3 5 (£J) x E, the bundle relation, and I : E — > Act 
a labelling function, labelling events with actions from 
a given alphabet Act. When X i— > e, the events in X 
should be pairwise in conflict; in this case e can hap- 
pen only if one of the events in X occurred earlier. Ig- 
noring the labelling function, a bundle event structure 
can in our framework best be understood as a propo- 
sitional theory, namely one whose formulae have the 
forms (2, 0) and (1, dds). Here "dds" stands for dis- 
joint disjunction of singletons; in the right form lattice 
of Figure [4] it can be positioned right below "bddc" , or 
right below "bddfc" of Section EH The configurations 
used in |22] are in our terminology finite reachable 
configurations. Using the translations of Section 
preserving finitary reachable equivalence, the bundle 
event structures map to a subclass of rooted, singular, 
locally conjunctive event structures with binary con- 
flict, and hence to a subclass of stable event structures 
as defined in [35] that contains the class of prime event 
structures of [35] , 

Langerak's notion of an extended bundle event 
structure on the other hand does not correspond to an 
event structure as in |34[ 135] . Here the symmetric bi- 
nary conflict relation # is replaced by an asymmetric 
counterpart a relation that was considered inde- 
pendently in [26J, writing e d for d ~> e. When 
d e, the event e can happen either initially or after 
d; however, as soon as e happens, d is blocked. When 
both d and e happen, d causally precedes e. Asymmet- 
ric conflict d ~> e can be translated into our framework 
as {d} h {d, e}, where it is important that {d} is the 
only set of events enabling {d, e}. The absence of both 
d ~» e and e ~v d translates to h {d, e}, and the con- 
junction of d ~> e and e ~> d is simply d#e and trans- 
lates to the absence of any X with X h {d, e}. Under 
this translation, the configurations of extended bundle 
event structures defined in [22] are exactly our finite 
reachable configurations of Definition 13.51 Thus, the 
class of extended bundle event structures can be re- 
garded as a subclass of our rooted, locally conjunctive 
event structures with binary conflict. However, they 
are not pure, and cannot be faithfully represented by 
configuration structures as studied in this paper. The 
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relationship between event structures with asymmetric 
conflict, Petri nets, and domains, is studied in pQ. 

A dual event structure, as studied in Katoen |21j . 
is like an extended bundle event structure, but with- 
out the requirement that when X i— > e the events 
in X should be pairwise in conflict. This amounts 
to generalising the formulae of the form (1, dds) to 
(1, any). They correspond to a subclass of our rooted 
event structures with binary conflict. The same can 
be said for the extended dual event structures of [21] . 
Here the new feature is the irreflexive and symmetric 
interleaving relation =f^, modelling mutual exclusion of 
events, i.e., disallowing them to overlap in time. As for 
the event structure M in Section [2.31 d ^ e can in our 
framework be modelled as {d} h {d, e] {e} h {d, e}. 

As remarked in the introduction, behaviour preserv- 
ing translations from safe Petri nets to a class of event 
structures, and from there to configuration structures, 
are defined in [35] . In Section [4TBl we saw that the event 
structures of [25] can be seen as a subclass of our event 
structures, in the sense that there are translations back 
and forth that respect the identify of events and the 
sets of associated configurations. The translation in 
[2"5] from safe nets to event structures proceeds in two 
steps: an unfolding turns every safe net into an occur- 
rence net — a particular kind of pure safe 1-occurrence 
net — and a mapping £ takes occurrence nets to event 
structures. The transitions of an occurrence net N 
become the events of the event structure £(N), and 
the finite configurations of N, as defined in this paper, 
equal the finite configurations of £(N) as defined in 
[25j . This follows directly from the definitions. Hence 
the translation £ preserves unitary configuration equiv- 
alence. It is not hard to check that the unfolding of 
a safe 1-occurrence net preserves finitary configura- 
tion equivalence as well. Thus, restricted to safe 1- 
occurrence nets, the translations of [25] are entirely in 
agreement with ours. 

This agreement extends to pure safe nets that are 
not 1-occurrence nets. However, this cannot be stated 
in the terminology of this paper, for the unfolding may 
make multiple copies of a single transition, namely one 
for every possible way in which it can be fired. Since 
the identify of events is thereby not preserved, this un- 
folding does not respect the equivalences of this paper. 

Define a 1 -reachable- occurrence net to be a net in 
which every reachable configuration is a set. This no- 
tion is a slight generalisation of a 1-occurrence net. 
When working up to reachable equivalence, all our 
work generalises without change from 1-occurrence 
nets to 1-reachable-occurrence nets. Similarly, define 
a 1-reachable-occurrence net N to be semantically pure 
if there exists a pure net N with the same places and 



transitions, and possibly less arcs and less initial to- 
kens, that has the same reachable configurations and 
the same step transition relation between those config- 
urations. When working up to reachable equivalence, 
also preserving the transitions between reachable con- 
figurations, our connections between pure 1-reachable- 
occurrence nets and pure event structures evidently 
generalise to semantically pure 1-reachable-occurrence 
nets — just as they did to reachably pure event struc- 
tures. 

BoUDOL [4] provides translations between a class of 
1-reachable-occurrence nets, the flow nets, and a class 
of flow event structures that have expressive power 
strictly between the bundle event structures of [32] and 
the stable event structures of [35] . His correspondence 
extends the correspondence due to [35] between oc- 
currence nets and prime event structures with binary 
conflict. Flow nets are defined to have the property 
that transitions that can occur in the same firing se- 
quence do not share a preplace. This implies that the 
reachable configurations of a flow net N, as well as the 
transition relation — >n between them, are unaffected 
by omitting the arcs from a transition e to a place s 
for which there also is an arc from s to e. Any flow net 
can thereby be transformed, in a behaviour preserving 
way, into a pure 1-reachable-occurrence net. Hence 
flow nets are semantically pure. 

As Boudol's translations preserve the notions of 
event (= transition) and finite reachable configuration, 
they are consistent with our approach. Our transla- 
tions can thus be regarded as an extension of the work 
of [3] to a more general class of Petri nets and event 
structures. 

Another translation between Petri nets and a model 
of event structures has been provided in Hoogers, 
Kleijn & Thiagarajan [20] , albeit only for systems 
without autoconcurrency. As mentioned, their event 
structures are families of configurations with a step 
transition relation between them. The translations of 
[20] are quite different from ours: even on 1-occurrence 
nets an individual transition may correspond to mul- 
tiple events in the associated event structure. We con- 
jecture that the two approaches are equivalent under 
a suitable notion of history preserving bisimulation. 

Future research 

As we have seen, both event structures and Petri nets 
have naturally associated transition relations. In the 
pure case these transition relations can be derived from 
their associated sets of configurations, but this fails 
more generally. A natural line of future work is there- 
fore to go beyond the pure case, looking for a suit- 
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able notion of configuration structure equipped with a 
transition relation and, perhaps, a suitable notion of 
propositional theory. 

We would also like to connect our models with 
appropriate versions of higher dimensional automata 
[28j . An embedding up to finitary reachable equiv- 
alence of rooted configuration structures as well as 
Petri nets into a form of higher dimensional automata 
called cubical sets is proposed in |10] . Another form of 
higher dimensional automata called labelled step tran- 
sition systems is considered in [9] . 

After the initial work of [25j it was natural to ask 
whether their unfolding could be seen as a universal 
construction. This led to a development of categories 
of event structures, nets and related models, and, in 
turn, to a general process algebra whose constructions 
were natural categorically: see [Ml [371 131] • In our case 
it would be natural to look for categories of configura- 
tion structures and the other models of this paper, so 
that, for example, the connections developed in Sec- 
tion 1 became functorial. The recent work of [361 US] 
on adding symmetry to structures may prove helpful 
here. Proposals for a category of configuration struc- 
tures can be found in [29] and [5]. 

In a different direction, the equivalences considered 
in this paper are quite fine and it would be interesting 
to look at coarser ones, say along the lines of history 
preserving bisimulation. In that connection, and also 
the categorical one, it may be useful to consider con- 
figuration structures, and other models, equipped with 
event labellings. 
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